Skip to content

Commit

Permalink
www/grafana9: Update to 9.3.6 (Fixes security vulnerabilities)
Browse files Browse the repository at this point in the history
ChangeLog: https://grafana.com/docs/grafana/latest/whatsnew/

Fixes:

 * Spoofing originalUrl of snapshots
 * Stored XSS in ResourcePicker component

PR:		269409
Reported by:	drtr0jan@yandex.ru (maintainer)
MFH:		2023Q1 (security fixes)
Security:	CVE-2022-23552 CVE-2022-39324
  • Loading branch information
drTr0jan authored and fernape committed Feb 9, 2023
1 parent 71bbafd commit 89532de
Show file tree
Hide file tree
Showing 3 changed files with 120 additions and 113 deletions.
5 changes: 2 additions & 3 deletions www/grafana9/Makefile
@@ -1,7 +1,6 @@
PORTNAME= grafana
DISTVERSIONPREFIX= v
DISTVERSION= 9.3.1
PORTREVISION= 1
DISTVERSION= 9.3.6
CATEGORIES= www
MASTER_SITES= https://dl.grafana.com/oss/release/:public \
https://raw.githubusercontent.com/${GH_ACCOUNT}/${GH_PROJECT}/${DISTVERSIONFULL}/:gomod
Expand All @@ -26,7 +25,7 @@ USES= cpe go:modules
USE_GITHUB= yes

USE_RC_SUBR= grafana
TAG= 89b365f
TAG= 978237e

GO_MODULE= github.com/grafana/grafana
GO_TARGET= ./pkg/cmd/grafana-server \
Expand Down
14 changes: 7 additions & 7 deletions www/grafana9/distinfo
@@ -1,7 +1,7 @@
TIMESTAMP = 1669968145
SHA256 (go/www_grafana9/grafana-grafana-v9.3.1_GH0/grafana-9.3.1.linux-amd64.tar.gz) = ecb21c48fc6fb9e418c5ea1fce6b6fbe59d26e87a8f93385eb1540fa0fa81ea1
SIZE (go/www_grafana9/grafana-grafana-v9.3.1_GH0/grafana-9.3.1.linux-amd64.tar.gz) = 88871923
SHA256 (go/www_grafana9/grafana-grafana-v9.3.1_GH0/go.mod) = 1fa2d376e62d2bd0f20fb1a8917d283153fd84a30e81d7691642778e791d8d4b
SIZE (go/www_grafana9/grafana-grafana-v9.3.1_GH0/go.mod) = 19160
SHA256 (go/www_grafana9/grafana-grafana-v9.3.1_GH0/grafana-grafana-v9.3.1_GH0.tar.gz) = d26b906c0d98e861a80f8c2db56ca1eb910afb7ddf337c207286c9698c9af38a
SIZE (go/www_grafana9/grafana-grafana-v9.3.1_GH0/grafana-grafana-v9.3.1_GH0.tar.gz) = 25629803
TIMESTAMP = 1675776469
SHA256 (go/www_grafana9/grafana-grafana-v9.3.6_GH0/grafana-9.3.6.linux-amd64.tar.gz) = 8d150fadbea872abb1e12acc9bf1f0ff60ee1bbb23da32a14a59f5eb29e31f03
SIZE (go/www_grafana9/grafana-grafana-v9.3.6_GH0/grafana-9.3.6.linux-amd64.tar.gz) = 89397564
SHA256 (go/www_grafana9/grafana-grafana-v9.3.6_GH0/go.mod) = a1b019554881a548201f41af3abeb8c7fa45918db2e88c8ebdc84c636e0dd1a7
SIZE (go/www_grafana9/grafana-grafana-v9.3.6_GH0/go.mod) = 19091
SHA256 (go/www_grafana9/grafana-grafana-v9.3.6_GH0/grafana-grafana-v9.3.6_GH0.tar.gz) = 59f3c82fa934869ac5d9292cd5c38277748399207c4ae552bb1fa58abb2bf25e
SIZE (go/www_grafana9/grafana-grafana-v9.3.6_GH0/grafana-grafana-v9.3.6_GH0.tar.gz) = 25657550

0 comments on commit 89532de

Please sign in to comment.