Bug 231020 - www/grafana4: Update to 4.6.4, fixes LDAP & OAuth login vulnerability (CVE-2018-558213)
Summary: www/grafana4: Update to 4.6.4, fixes LDAP & OAuth login vulnerability (CVE-20...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Steve Wills
URL: https://github.com/grafana/grafana/re...
Keywords:
Depends on:
Blocks:
 
Reported: 2018-08-30 13:12 UTC by Dmitri Goutnik
Modified: 2018-09-10 04:05 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (swills)


Attachments
grafana4-4.6.4.patch (1.42 KB, patch)
2018-08-30 13:12 UTC, Dmitri Goutnik
dmgk: maintainer-approval?
Details | Diff
vuxml-grafana4.patch (1.85 KB, patch)
2018-08-30 13:13 UTC, Dmitri Goutnik
dmgk: maintainer-approval?
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Dmitri Goutnik freebsd_committer freebsd_triage 2018-08-30 13:12:49 UTC
Created attachment 196706 [details]
grafana4-4.6.4.patch

- Update 4.6.3 -> 4.6.4
- Add VuXML entry

Changelog: https://github.com/grafana/grafana/releases/tag/v4.6.4

QA:
  poudriere testport: OK (112a, 104i)
Comment 1 Dmitri Goutnik freebsd_committer freebsd_triage 2018-08-30 13:13:12 UTC
Created attachment 196707 [details]
vuxml-grafana4.patch
Comment 2 commit-hook freebsd_committer freebsd_triage 2018-08-31 23:48:43 UTC
A commit references this bug:

Author: swills
Date: Fri Aug 31 23:47:51 UTC 2018
New revision: 478626
URL: https://svnweb.freebsd.org/changeset/ports/478626

Log:
  Document grafana issues

  PR:		 231019
  PR:		 231020
  PR:		 231021
  PR:		 231022

Changes:
  head/security/vuxml/vuln.xml
Comment 3 commit-hook freebsd_committer freebsd_triage 2018-09-01 00:00:00 UTC
A commit references this bug:

Author: swills
Date: Fri Aug 31 23:58:56 UTC 2018
New revision: 478635
URL: https://svnweb.freebsd.org/changeset/ports/478635

Log:
  www/grafana4: Update to 4.6.4

  PR:		231020
  Submitted by:	Dmitri Goutnik <dg@syrec.org>
  Security:	1f8d5806-ac51-11e8-9cb6-10c37b4ac2ea

Changes:
  head/www/grafana4/Makefile
  head/www/grafana4/distinfo
Comment 4 Steve Wills freebsd_committer freebsd_triage 2018-09-01 00:00:18 UTC
Committed, thanks!