RHSA-2021:3769: Important: grafana security update
Published Oct 12, 2021
·Updated
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. <br>Security Fix(es):<br><li> grafana: Snapshot authentication bypass (CVE-2021-39226)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
56 affected componentsFixes available
redhat/grafana<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-azure-monitor<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-cloudwatch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-debuginfo<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-elasticsearch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-graphite<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-influxdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-loki<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mssql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mysql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-opentsdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-postgres<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-prometheus<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-stackdriver<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-azure-monitor<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-cloudwatch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-debuginfo<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-elasticsearch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-graphite<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-influxdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-loki<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mssql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mysql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-opentsdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-postgres<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-prometheus<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-stackdriver<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-azure-monitor<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-cloudwatch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-debuginfo<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-elasticsearch<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-graphite<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-influxdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-loki<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mssql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-mysql<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-opentsdb<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-postgres<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-prometheus<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana-stackdriver<6.2.2-7.el8_1
6.2.2-7.el8_1
redhat/grafana<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-azure-monitor<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-cloudwatch<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-debuginfo<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-elasticsearch<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-graphite<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-influxdb<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-loki<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-mssql<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-mysql<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-opentsdb<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-postgres<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-prometheus<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
redhat/grafana-stackdriver<6.2.2-7.el8_1.aa
6.2.2-7.el8_1.aa
Remediation
Event History
Jan 2, 2025
Advisory Published
via Red Hat·02:53 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:3769?
The severity of RHSA-2021:3769 is classified as important.
2
How do I fix RHSA-2021:3769?
To fix RHSA-2021:3769, upgrade to the remediation version 6.2.2-7.el8_1.
3
What is the vulnerability in RHSA-2021:3769?
RHSA-2021:3769 addresses a snapshot authentication bypass vulnerability identified by CVE-2021-39226.
4
Which Grafana versions are affected by RHSA-2021:3769?
Grafana versions below 6.2.2-7.el8_1 are affected by RHSA-2021:3769.
5
Is there a workaround for RHSA-2021:3769?
There is no official workaround provided for RHSA-2021:3769; updating to the fixed version is recommended.