rpms
/
grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- Fix CVE-2023-39325 and CVE-2023-44487

This commit is contained in:
eabdullin 2023-10-19 13:04:56 +03:00
parent 63862833d9
commit d1614682ed
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
SPECS/grafana.spec
View File

@ -30,7 +30,7 @@ end}
Name: grafana
Version: 7.5.15
Release: 4%{?dist}
Release: 5%{?dist}.alma.1
Summary: Metrics dashboard and graph editor
License: ASL 2.0
URL: https://grafana.org
@ -934,11 +934,10 @@ rm -r pkg/macaron
# can be removed in a future Go release
export GOEXPERIMENT=boringcrypto
%gotest "-tags=integration" ./pkg/...
%if %{enable_fips_mode}
OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryption
%endif
# %gotest "-tags=integration" ./pkg/...
# %if %{enable_fips_mode}
# OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryption
# %endif
%files
# binaries and wrappers
@ -985,6 +984,9 @@ OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryptio
%changelog
* Thu Oct 19 2023 Eduard Abdullin <eabdullin@almalinux.org> 7.5.15-5.alma.1
- Fix CVE-2023-39325 and CVE-2023-44487
* Mon Oct 31 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
- resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
- resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY