UbuntuUpdates.org

Package "graphite-web"

Name: graphite-web

Description:

Enterprise Scalable Realtime Graphing
Latest version: 1.1.4-5ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Homepage: https://github.com/graphite-project/graphite-web/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "graphite-web"

All arch deb package
APT INSTALL

Other versions of "graphite-web" in Focal

Repository Area Version
base universe 1.1.4-5
updates universe 1.1.4-5ubuntu0.1

Changelog

Version: 1.1.4-5ubuntu0.1 2023-07-25 11:07:06 UTC

  graphite-web (1.1.4-5ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: XSS
    - debian/patches/CVE-2022-4728-[1-10].patch: fixed XSS issues in Cookie Handler
      component (CVE-2022-4728), Template Name Handler component
      (CVE-2022-4729), and Absolute Time Range Handler component
      (CVE-2022-4730).
    - CVE-2022-4728
    - CVE-2022-4729
    - CVE-2022-4730

 -- Amir Naseredini <email address hidden> Tue, 18 Jul 2023 18:02:38 +0100
CVE-2022-4728 A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler
CVE-2022-4729 A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Ha
CVE-2022-4730 A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Rang


About   -   Send Feedback to @ubuntu_updates