Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Rocky Linux 9 RLSA-2023:4030 Critical: Grafana Account Takeover

rocky
Calendar Grey July 19, 2023
Rockylinux Esm H88
Important Grafana security patch released for Rocky Linux 9 to address vulnerabilities related to Azure AD OAuth that may lead to unauthorized account access.
Critical: grafana security update

Summary

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


RPMs

grafana-0:9.0.9-3.el9_2.aarch64.rpm

grafana-0:9.0.9-3.el9_2.ppc64le.rpm

grafana-0:9.0.9-3.el9_2.s390x.rpm

grafana-0:9.0.9-3.el9_2.src.rpm

grafana-0:9.0.9-3.el9_2.x86_64.rpm

grafana-debuginfo-0:9.0.9-3.el9_2.aarch64.rpm

grafana-debuginfo-0:9.0.9-3.el9_2.ppc64le.rpm

grafana-debuginfo-0:9.0.9-3.el9_2.s390x.rpm

grafana-debuginfo-0:9.0.9-3.el9_2.x86_64.rpm

grafana-debugsource-0:9.0.9-3.el9_2.aarch64.rpm

grafana-debugsource-0:9.0.9-3.el9_2.ppc64le.rpm

grafana-debugsource-0:9.0.9-3.el9_2.s390x.rpm

grafana-debugsource-0:9.0.9-3.el9_2.x86_64.rpm

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2023-3128

Severity
critical

Name: RLSA-2023:4030
Affected Products: Rocky Linux 9

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2213626


Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here