IevaandKarl Persson 3282afc648 V8.5.12 security patch (#486) (#55495) ...

* Data source: prevent from using auth proxy header as custom data source header (#477)

* apply security changes for auth proxy permission escalation

* add links to CVE

* remove duplicate check

* apply security fix for admin only folder migration (#484)

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

2022-09-20 16:40:52 +01:00

..

accesscontrol

RBAC: Fix Anonymous Editors missing dashboard controls (#52649)

2022-07-26 09:19:35 +02:00

alerting

Alerting: Validate alert notification UID length (#45546) (#49512)

2022-05-24 17:22:08 +02:00

annotations

Access control: SQL filtering for annotation listing (#47467) (#47555)

2022-04-11 14:29:54 +02:00

auth

Chore: Remove context.TODO() (#43409)

2021-12-22 11:02:42 +01:00

cleanup

Chore: Remove bus.Dispatch from cleanup service (#45401)

2022-02-15 14:56:19 +01:00

comments

Access control: refactor RBAC checks (#48107) (#48164)

2022-04-25 10:59:26 +02:00

contexthandler

Fix: Choose Lookup params per auth module (#397)

2022-07-14 15:04:41 +01:00

dashboardimport

LibraryPanels: Fix library panels not connecting properly in imported dashboards (#49161) (#49176)

2022-05-18 17:02:49 +02:00

dashboards

Fix anonymous access (#52615) (#52635)

2022-07-22 11:08:50 +02:00

dashboardsnapshots

Chore: Remove bus.Bus field (#47695) (#47704)

2022-04-13 19:11:20 +02:00

datasourceproxy

Datasource: Fixes storing of secureJSONData when creating/updating datasource (#45290)

2022-02-11 15:52:14 +01:00

datasources

V8.5.12 security patch (#486) (#55495)

2022-09-20 16:40:52 +01:00

encryption

Encryption: Add support for decrypting ciphertexts with algorithm metadata (#49312) (#49336)

2022-05-23 07:52:49 +02:00

featuremgmt

[v8.5.x] Backport 48550 to v8.5.x (#48656)

2022-05-03 20:58:02 +02:00

guardian

fetch permissions by uid (#49100) (#49134)

2022-05-18 11:25:16 +02:00

hooks

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00

kmsproviders

Encryption: Refine secrets-related commands (#45201)

2022-02-23 16:04:53 +01:00

ldap

LDAP: Use an interface instead of a bus to get group teams (#42165)

2022-02-01 12:03:21 +01:00

libraryelements

backport 48171 (#48775)

2022-05-06 09:35:37 +01:00

librarypanels

backport 48171 (#48775)

2022-05-06 09:35:37 +01:00

licensing

Access control: Move licensing actions to licensing package (#46588)

2022-03-16 14:37:19 +01:00

live

Live: collect more usage stats – enabled, ha enabled, num nodes, channels, subs (#47378) (#47738)

2022-04-13 13:07:19 -07:00

login

Fix: Choose Lookup params per auth module (#397)

2022-07-14 15:04:41 +01:00

multildap

remove bus from login (#44995)

2022-02-09 17:17:09 +01:00

ngalert

V8.5.12 security patch (#486) (#55495)

2022-09-20 16:40:52 +01:00

notifications

Alerting: Fix Teams notifier not failing on 200 response with error (#52254) (#52269)

2022-07-14 15:04:17 -04:00

oauthtoken

Chore: Remove bus from oauthtoken (#46811)

2022-03-21 21:13:57 +01:00

plugindashboards

Chore: Remove bus (#47511) (#47677)

2022-04-13 11:51:21 +02:00

pluginsettings

Plugins: Add plugin settings DTO (#46283)

2022-03-18 20:49:13 +01:00

provisioning

Chore: Remove bus from dashboards provisioning (#47495) (#47507)

2022-04-12 14:04:40 +02:00

query

V8.5.12 security patch (#486) (#55495)

2022-09-20 16:40:52 +01:00

queryhistory

Query history: Add search functionality (#45932)

2022-03-07 12:28:04 +01:00

quota

Update quota service to accept context (#45186)

2022-02-10 22:17:50 +01:00

rendering

Rendering: Add support for renderer token (#54425) (#54438)

2022-08-30 14:05:05 +02:00

schemaloader

FeatureFlags: define features outside settings.Cfg (take 3) (#44443)

2022-01-26 09:44:20 -08:00

search

Chore: Remove bus.Bus field (#47695) (#47704)

2022-04-13 19:11:20 +02:00

searchusers

Bus: Tests cleanup (#46025)

2022-03-02 11:05:31 +01:00

searchV2

Search: Implement basic improved UI (#46758)

2022-03-30 09:50:32 -07:00

secrets

Encryption: Stop decrypting EE encrypted secrets with legacy encryption (#50090) (#50176)

2022-06-03 17:35:53 +02:00

serviceaccounts

backport 48171 (#48775)

2022-05-06 09:35:37 +01:00

shorturls

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00

sqlstore

V8.5.12 security patch (#486) (#55495)

2022-09-20 16:40:52 +01:00

store

Storage: add basic storage service (#46604)

2022-03-17 10:19:23 -07:00

teamguardian

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

thumbs

Previews: fix crawler in multi-org deployments (#46967)

2022-03-29 13:40:11 +01:00

updatechecker

Analytics: Enable grafana and plugin update checks to be operated independently (#46352)

2022-04-06 10:50:21 +02:00

validations

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00