From c272dc498fb680a7eefc3e4744ee236d4b155069 Mon Sep 17 00:00:00 2001 From: "grafana-delivery-bot[bot]" <132647405+grafana-delivery-bot[bot]@users.noreply.github.com> Date: Tue, 22 Apr 2025 19:59:55 +0000 Subject: [PATCH] Release: update changelog for 11.4.3+security-01 (#104337) * Update changelog * baldm0mma/ update cves in changelog * baldm0mma/ fix cve number --------- Co-authored-by: github-actions[bot] Co-authored-by: jev forsberg (cherry picked from commit 0d0981ac57aad99e48408da45dc5a649d404d30f) --- CHANGELOG.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 270dfd7655f..a3977f60b33 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,22 @@ + + +# 11.4.3+security-01 (2025-04-22) + +### Features and enhancements + +- **Chore:** Bump Go to 1.23.7 [#101582](https://github.com/grafana/grafana/pull/101582), [@macabu](https://github.com/macabu) +- **Chore:** Bump Go to 1.23.7 (Enterprise) +- **Chore:** Update CVE-affected golang-gwt dependencies [#102704](https://github.com/grafana/grafana/pull/102704), [@grambbledook](https://github.com/grambbledook) + +### Bug fixes + +- **Alerting:** Fix token-based Slack image upload to work with channel names [#101072](https://github.com/grafana/grafana/pull/101072), [@JacobsonMT](https://github.com/JacobsonMT) +- **InfluxDB:** Improve handling of template variables contained in regular expressions (InfluxQL) [#100987](https://github.com/grafana/grafana/pull/100987), [@aangelisc](https://github.com/aangelisc) +- **Service Accounts:** Do not show error pop-ups for Service Account and Renderer UI flows [#101790](https://github.com/grafana/grafana/pull/101790), [@IevaVasiljeva](https://github.com/IevaVasiljeva) +- **Security:** Fix CVE-2025-3454 +- **Security:** Fix CVE-2025-2703 + + # 11.4.2 (2025-02-18)