RHSA-2022:5719: Important: grafana security update
Published Jul 26, 2022
·Updated
Grafana is an open source, feature rich metrics dashboard and graph editor forGraphite, InfluxDB & OpenTSDB.Security Fix(es): grafana: OAuth account takeover (CVE-2022-31107) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section.
Affected Software
56 affected componentsFixes available
redhat/grafana<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-azure-monitor<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-cloudwatch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-debuginfo<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-elasticsearch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-graphite<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-influxdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-loki<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mssql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mysql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-opentsdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-postgres<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-prometheus<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-stackdriver<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-azure-monitor<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-cloudwatch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-debuginfo<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-elasticsearch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-graphite<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-influxdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-loki<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mssql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mysql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-opentsdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-postgres<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-prometheus<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-stackdriver<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-azure-monitor<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-cloudwatch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-debuginfo<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-elasticsearch<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-graphite<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-influxdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-loki<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mssql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-mysql<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-opentsdb<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-postgres<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-prometheus<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana-stackdriver<6.3.6-5.el8_2
6.3.6-5.el8_2
redhat/grafana<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-azure-monitor<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-cloudwatch<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-debuginfo<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-elasticsearch<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-graphite<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-influxdb<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-loki<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-mssql<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-mysql<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-opentsdb<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-postgres<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-prometheus<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
redhat/grafana-stackdriver<6.3.6-5.el8_2.aa
6.3.6-5.el8_2.aa
Remediation
Event History
Jun 13, 2026
Advisory Published
via Red Hat·11:02 PM
Data Sourced
via Red Hat·11:02 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2022:5719?
The severity of RHSA-2022:5719 is classified as important.
2
How do I fix RHSA-2022:5719?
To fix RHSA-2022:5719, update to grafana version 6.3.6-5.el8_2 or higher.
3
What are the implications of RHSA-2022:5719?
The implications of RHSA-2022:5719 include potential OAuth account takeover vulnerabilities.
4
What software is affected by RHSA-2022:5719?
RHSA-2022:5719 affects multiple packages including grafana, grafana-debuginfo, and grafana-azure-monitor among others.
5
Is RHSA-2022:5719 related to CVE-2022-31107?
Yes, RHSA-2022:5719 addresses the vulnerability identified by CVE-2022-31107.