[Bug 271086] www/grafana{8,9}: Update to 8.5.24 and 9.4.9 (Fixes security vulnerability)
Date: Wed, 26 Apr 2023 20:23:25 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271086 Boris Korzun <drtr0jan@yandex.ru> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ports-secteam@FreeBSD.org Attachment #241775| |maintainer-approval?(ports- Flags| |secteam@FreeBSD.org) --- Comment #2 from Boris Korzun <drtr0jan@yandex.ru> --- Created attachment 241775 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=241775&action=edit vuxml.patch vuxml: * CVE-2023-1387 - Exposure of sensitive information to an unauthorized actor ( https://grafana.com/blog/2023/04/26/grafana-security-release-new-versions-of-grafana-with-security-fixes-for-cve-2023-28119-and-cve-2023-1387/ ) * CVE-2023-24538 - Critical vulnerability in golang ( https://grafana.com/blog/2023/04/26/precautionary-patches-for-grafana-released-following-critical-go-vulnerability-cve-2023-24538/ ) -- You are receiving this mail because: You are the assignee for the bug.