{"affected":[{"ecosystem_specific":{"binaries":[{"grafana":"7.5.7-3.12.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.3","name":"grafana","purl":"pkg:rpm/opensuse/grafana&distro=openSUSE%20Leap%2015.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"7.5.7-3.12.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for grafana fixes the following issues:\n\n- CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call (bsc#1183803)\n- Update to version 7.5.7:\n  * Updated relref to 'Configuring exemplars' section (#34240) (#34243)\n  * Added exemplar topic (#34147) (#34226)\n  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)\n  * Instructions to separate emails with semicolons (#32499) (#34138)\n  * Docs: Remove documentation of v8 generic OAuth feature (#34018)\n  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)\n  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)\n  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)\n  * Stop hoisting @icons/material (#33922)\n  * Chore: fix react-color version in yarn.lock (#33914)\n  * 'Release: Updated versions in package to 7.5.6' (#33909)\n  * Loki: fix label browser crashing when + typed (#33900) (#33901)\n  * Document `hide_version` flag (#33670) (#33881)\n  * Add isolation level db configuration parameter (#33830) (#33878)\n  * Sanitize PromLink button (#33874) (#33876)\n  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)\n  * Docs feedback: /administration/provisioning.md (#33804) (#33842)\n  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)\n  * Docs: Update _index.md (#33797) (#33799)\n  * Docs: Update installation.md (#33656) (#33703)\n  * GraphNG: uPlot 1.6.9 (#33598) (#33612)\n  * dont consider invalid email address a failed email (#33671) (#33681)\n  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)\n  * add template for dashboard url parameters  (#33549) (#33588)\n  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)\n  * Update team.md (#33454) (#33536)\n  * Removed duplicate file 'dashboard_folder_permissions.md (#33497)\n  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)\n  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)\n  * Documentation: Update developer-guide.md (#33478) (#33490)\n  * add closed parenthesis to fix a hyperlink (#33471) (#33481)\n\n- Update to version 7.5.5:\n  * 'Release: Updated versions in package to 7.5.5' (#33469)\n  * GraphNG: Fix exemplars window position (#33427) (#33462)\n  * Remove field limitation from slack notification (#33113) (#33455)\n  * Prometheus: Support POST in template variables (#33321) (#33441)\n  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)\n  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)\n  * Docs: Removed type from find annotations example. (#33399) (#33403)\n  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)\n  * Updated label for add panel. (#33285) (#33286)\n  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)\n  * Docs: Sync latest master docs with 7.5.x (#33156)\n  * Docs: Update getting-started-influxdb.md (#33234) (#33241)\n  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)\n  * Minor Changes in Auditing.md (#31435) (#33238)\n  * Docs: Add license check endpoint doc (#32987) (#33236)\n  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)\n  * Docs: InfluxDB doc improvements (#32815) (#33185)\n  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)\n  * update cla (#33181)\n  * Fix inefficient regular expression (#33155) (#33159)\n  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)\n  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)\n  * Update team.md (#33060) (#33084)\n  * GE issue 1268 (#33049) (#33081)\n  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)\n  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)\n  * Docs: Replace next with latest in aliases (#33054) (#33059)\n  * Added missing link item. (#33052) (#33055)\n  * Backport 33034 (#33038)\n  * Docs: Backport 32916 to v7.5x  (#33008)\n  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)\n  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)\n  * Docs: Sync release branch with latest docs (#32986)\n\n- Update to version 7.5.4:\n  * 'Release: Updated versions in package to 7.5.4' (#32971)\n  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)\n  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)\n  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)\n  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)\n  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)\n  * GraphNG: uPlot 1.6.8 (#32859) (#32863)\n  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)\n  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)\n  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)\n  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)\n\n- Update to version 7.5.3:\n  * 'Release: Updated versions in package to 7.5.3' (#32745)\n  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)\n  * Loki: Remove empty annotations tags (#32359) (#32490)\n  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)\n  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)\n  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)\n  * Variables: Confirms selection before opening new picker (#32586) (#32710)\n  * CloudWarch: Fix service quotas link (#32686) (#32689)\n  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)\n  * chore: bump execa to v2.1.0 (#32543) (#32592)\n  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)\n  * Fix broken gtime tests (#32582) (#32587)\n  * resolve conflicts (#32567)\n  * gtime: Make ParseInterval deterministic (#32539) (#32560)\n  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)\n  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)\n  * AdHocVariable: Adds default data source (#32470) (#32476)\n  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)\n  * Prometheus: align exemplars check to latest api change (#32513) (#32515)\n  * 'Release: Updated versions in package to 7.5.2' (#32502)\n  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)\n  * Set spanNulls to default (#32471) (#32486)\n  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)\n  * API: Return 409 on datasource version conflict (#32425) (#32433)\n  * API: Return 400 on invalid Annotation requests (#32429) (#32431)\n  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)\n  * Table: Fixes so links work for image cells (#32370) (#32410)\n  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)\n  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)\n  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)\n  * 'Release: Updated versions in package to 7.5.1' (#32362)\n  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)\n  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)\n  * 'Release: Updated versions in package to 7.5.0' (#32308)\n  * Loki: Fix text search in Label browser (#32293) (#32306)\n  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)\n  * PieChartV2: Add migration from old piechart (#32259) (#32291)\n  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)\n  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)\n  * Library Panels: Add 'Discard' button to panel save modal (#31647) (#32281)\n  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)\n  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)\n  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)\n  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)\n  * Logs: If log message missing, use empty string (#32080) (#32243)\n  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)\n  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)\n  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)\n  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)\n  * Fix loading timezone info on windows (#32029) (#32149)\n  * SQLStore: Close session in withDbSession (#31775) (#32108)\n  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)\n  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)\n  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)\n  * Backport 32005 to v7.5.x #32128 (#32130)\n  * Loki: Label browser UI updates (#31737) (#32119)\n  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)\n  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)\n  * LibraryPanels: Improves the Get All experience (#32028) (#32093)\n  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)\n  * Exemplars: always query exemplars (#31673) (#32024)\n  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)\n  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)\n  * Chore: Tidy up Go deps (#32053)\n  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)\n  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)\n  * [v7.5.x] Auth: Allow soft token revocation (#32037)\n  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)\n  * Make master green (#32011) (#32015)\n  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)\n  * Variables: Fixes filtering in picker with null items (#31979) (#31995)\n  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)\n  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)\n  * Loki: Fix type errors in language_provider (#31902) (#31945)\n  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)\n  * Cloudwatch: use shared library for aws auth (#29550) (#31946)\n  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)\n  * Backport 31913 to v7.5.x (#31955)\n  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)\n  * Variables: Do not reset description on variable type change (#31933) (#31939)\n  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)\n  * Elasticseach: Support histogram fields (#29079) (#31914)\n  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)\n  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)\n  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)\n  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)\n  * Run go mod tidy to update go.mod and go.sum (#31859)\n  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)\n  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)\n  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)\n  * Remove invalid attribute (#31848) (#31850)\n  * CloudWatch: Restrict auth provider and assume role usage according to… (#31845)\n  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)\n  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)\n  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)\n  * Change piechart plugin state to beta (#31797) (#31798)\n  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)\n  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)\n  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)\n  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)\n  * log skipped, performed and duration for migrations (#31722) (#31754)\n  * Search: Make items more compact (#31734) (#31750)\n  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)\n  * Tempo: Convert tempo to backend data source2 (#31733)\n  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)\n  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)\n  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)\n  * Tempo: set authentication header properly (#31699) (#31701)\n  * Tempo: convert to backend data source (#31618) (#31695)\n  * Update package.json (#31672)\n  * Release: Bump version to 7.5.0-beta.1 (#31664)\n  * Fix whatsNewUrl version to 7.5 (#31666)\n  * Chore: add alias for what's new 7.5 (#31669)\n  * Docs: Update doc for PostgreSQL authentication (#31434)\n  * Docs: document report template variables (#31637)\n  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)\n  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)\n  * Live: Use pure WebSocket transport (#31630)\n  * Docs: Fix broken image link (#31661)\n  * Docs: Add Whats new in 7.5 (#31659)\n  * Docs: Fix links for 7.5 (#31658)\n  * Update enterprise-configuration.md (#31656)\n  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)\n  * Tracing: Small improvements to trace types (#31646)\n  * Update _index.md (#31645)\n  * AlertingNG: code refactoring (#30787)\n  * Remove pkill gpg-agent (#31169)\n  * Remove format for plugin routes (#31633)\n  * Library Panels: Change unsaved change detection logic (#31477)\n  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)\n  * add new metrics and dimensions (#31595)\n  * fix devenv dashboard content typo (#31583)\n  * DashList: Sort starred and searched dashboard alphabetically (#31605)\n  * Docs: Update whats-new-in-v7-4.md (#31612)\n  * SSE: Add 'Classic Condition' on backend (#31511)\n  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)\n  * Alerting: PagerDuty: adding current state to the payload (#29270)\n  * devenv: Fix typo (#31589)\n  * Loki: Label browser (#30351)\n  * LibraryPanels: No save modal when user is on same dashboard (#31606)\n  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)\n  * Update node-graph.md (#31571)\n  * test: pass Cypress options objects into selector wrappers (#31567)\n  * Loki: Add support for alerting (#31424)\n  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)\n  * LibraryPanels: Adds version column (#31590)\n  * PieChart: Add color changing options to pie chart (#31588)\n  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)\n  * Bring back correct legend sizing afer PlotLegend refactor (#31582)\n  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)\n  * LibraryPanels: Deletes library panels during folder deletion (#31572)\n  * chore: bump lodash to 4.17.21 (#31549)\n  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)\n  * TestData: Fixes never ending annotations scenario (#31573)\n  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)\n  * propagate plugin unavailable message to UI (#31560)\n  * ConfirmButton: updates story from knobs to controls (#31476)\n  * Loki: Refactor line limit to use grafana/ui component (#31509)\n  * LibraryPanels: Adds folder checks and permissions (#31473)\n  * Add guide on custom option editors (#31254)\n  * PieChart: Update text color and minor changes (#31546)\n  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)\n  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)\n  * PieChart: Improve piechart legend and options (#31446)\n  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)\n  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)\n  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)\n  * Add multiselect options ui (#31501)\n  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)\n  * Variables: Fixes error with: cannot read property length of undefined (#31458)\n  * Explore: Show ANSI colored logs in logs context (#31510)\n  * LogsPanel: Show all received logs  (#31505)\n  * AddPanel: Design polish  (#31484)\n  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)\n  * influxdb: flux: handle is-hidden (#31324)\n  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)\n  * FolderPicker: Remove useNewForms from FolderPicker (#31485)\n  * Add reportVariables feature toggle (#31469)\n  * Grafana datasource: support multiple targets (#31495)\n  * Update license-restrictions.md (#31488)\n  * Docs: Derived fields links in logs detail view (#31482)\n  * Docs: Add new data source links to Enterprise page (#31480)\n  * Convert annotations to dataframes (#31400)\n  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)\n  * GrafanaUI: Fixes typescript error for missing css prop (#31479)\n  * Login: handle custom token creation error messages (#31283)\n  * Library Panels: Don't list current panel in available panels list (#31472)\n  * DashboardSettings: Migrate Link Settings to React (#31150)\n  * Frontend changes for library panels feature (#30653)\n  * Alerting notifier SensuGo: improvements in default message (#31428)\n  * AppPlugins: Options to disable showing config page in nav (#31354)\n  * add aws config (#31464)\n  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)\n  * Chore: Fixes small typos (#31461)\n  * Graphite/SSE: update graphite to work with server side expressions (#31455)\n  * update the lastest version to 7.4.3 (#31457)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)\n  * AWS: Add aws plugin configuration (#31312)\n  * Revert ''Release: Updated versions in package to 7.4.3' (#31444)' (#31452)\n  * Remove UserSyncInfo.tsx (#31450)\n  * Elasticsearch: Add word highlighting to search results (#30293)\n  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)\n  * CloudWatch: Make it possible to specify custom api endpoint (#31402)\n  * Chore: fixed incorrect naming for disable settings (#31448)\n  * TraceViewer: Fix show log marker in spanbar (#30742)\n  * LibraryPanels: Adds permissions to getAllHandler (#31416)\n  * NamedColorsPalette: updates story from knobs to controls (#31443)\n  * 'Release: Updated versions in package to 7.4.3' (#31444)\n  * ColorPicker: updates story from knobs to controls (#31429)\n  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)\n  * ClipboardButton: updates story from knobs to controls (#31422)\n  * we should never log unhashed tokens (#31432)\n  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)\n  * Elasticsearch: Fix query initialization logic & query transformation from Promethous/Loki (#31322)\n  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)\n  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)\n  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)\n  * add hg team as migrations code owners (#31420)\n  * Remove tidy-check script (#31423)\n  * InfluxDB: handle columns named 'table' (#30985)\n  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)\n  * Devenv: Add gdev-influxdb2 data source (#31250)\n  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)\n  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)\n  * remove squadcast details from docs (#31413)\n  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)\n  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)\n  * CallToActionCard: updates story from knobs to controls (#31393)\n  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)\n  * Chore: Upgrade eslint packages (#31408)\n  * Cascader: updates story from knobs to controls (#31399)\n  * addressed issues 28763 and 30314. (#31404)\n  * Added section Query a time series database by id (#31337)\n  * Prometheus: Change default httpMethod for new instances to POST (#31292)\n  * Data source list: Use Card component (#31326)\n  * Chore: Remove gotest.tools dependency (#31391)\n  * Revert 'StoryBook: Introduces Grafana Controls (#31351)' (#31388)\n  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)\n  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)\n  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)\n  * Chore: Fix strict errors, down to 416 (#31365)\n  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)\n  * StoryBook: Introduces Grafana Controls (#31351)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)\n  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)\n  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)\n  * Zipkin: Show success on test data source (#30829)\n  * Update grot template (needs more info) (#31350)\n  * DatasourceSrv: Fix instance retrieval when datasource variable value set to 'default' (#31347)\n  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)\n  * Grafana/UI: Add basic legend to the PieChart (#31278)\n  * SAML: single logout only enabled in enterprise (#31325)\n  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)\n  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)\n  * LibraryPanels: Syncs panel title with name (#31311)\n  * Chore: Upgrade golangci-lint (#31330)\n  * Add info to docs about concurrent session limits (#31333)\n  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)\n  * BarGuage: updates story from knobs to controls (#31223)\n  * Docs: Clarifies how to add Key/Value pairs (#31303)\n  * Usagestats: Exclude folders from total dashboard count (#31320)\n  * ButtonCascader: updates story from knobs to controls (#31288)\n  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)\n  * Grafana-UI: Update tooltip type (#31310)\n  * fix 7.4.2 release note (#31299)\n  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)\n  * Chore: reduce strict errors for variables (#31241)\n  * update latest release version (#31296)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)\n  * Correct name of Discord notifier tests (#31277)\n  * Docs: Clarifies custom date formats for variables (#31271)\n  * BigValue: updates story from knobs to controls (#31240)\n  * Docs: Annotations update (#31194)\n  * Introduce functions for interacting with library panels API (#30993)\n  * Search: display sort metadata (#31167)\n  * Folders: Editors should be able to edit name and delete folders (#31242)\n  * Make Datetime local (No date if today) working (#31274)\n  * UsageStats: Purpose named variables (#31264)\n  * Snapshots: Disallow anonymous user to create snapshots (#31263)\n  * only update usagestats every 30min (#31131)\n  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)\n  * Grafana-UI: Add id to Select to make it easier to test (#31230)\n  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)\n  * UI/Card: Fix handling of 'onClick' callback (#31225)\n  * Loki: Add line limit for annotations (#31183)\n  * Remove deprecated and breaking loki config field (#31227)\n  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)\n  * LibraryPanels: Disconnect before connect during dashboard save (#31235)\n  * Disable Change Password for OAuth users (#27886)\n  * TagsInput: Design update and component refactor (#31163)\n  * Variables: Adds back default option for data source variable (#31208)\n  * IPv6: Support host address configured with enclosing square brackets (#31226)\n  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)\n  * GraphNG: refactor core to class component (#30941)\n  * Remove last synchronisation field from LDAP debug view (#30984)\n  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)\n  * Graph: Make axes unit option work even when field option unit is set (#31205)\n  * AlertingNG:  Test definition  (#30886)\n  * Docs: Update Influx config options (#31146)\n  * WIP: Skip this call when we skip migrations (#31216)\n  * use 0.1.0 (#31215)\n  * DataSourceSrv: Filter out non queryable data sources by default (#31144)\n  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)\n  * Chore: report eslint no-explicit-any errors to metrics (#31182)\n  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)\n  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)\n  * Alerting: Fix modal text for deleting obsolete notifier (#31171)\n  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)\n  * Variables: Fixes missing empty elements from regex filters (#31156)\n  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)\n  * Fixed the typo. (#31189)\n  * Docs: Rewrite preferences docs (#31154)\n  * Explore/Refactor: Simplify URL handling (#29173)\n  * DashboardLinks: Fixes links always cause full page reload (#31178)\n  * Replace PR with Commit truncated hash when build fails (#31177)\n  * Alert: update story to use controls (#31145)\n  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)\n  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)\n  * Update prometheus.md (#31173)\n  * Variables: Extend option pickers to accept custom onChange callback (#30913)\n  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)\n  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)\n  * Add author name and pr number in drone pipeline notifications (#31124)\n  * Prometheus: Add documentation for ad-hoc filters (#31122)\n  * DataSourceSettings: Fixes add header button, it should not trigger a save & test action (#31135)\n  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)\n  * Chore: Update latest.json (#31139)\n  * Docs: add 7.4.1 relese notes link (#31137)\n  * PieChart: Progress on new core pie chart  (#28020)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)\n  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)\n  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)\n  * MuxWriter: Handle error for already closed file (#31119)\n  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)\n  * Search: add sort information in dashboard results (#30609)\n  * area/grafana/e2e: ginstall should pull version specified (#31056)\n  * Exemplars: Change CTA style (#30880)\n  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)\n  * Docs: request security (#30937)\n  * update configurePanel for 7.4.0 changes (#31093)\n  * Elasticsearch: fix log row context erroring out (#31088)\n  * Prometheus: Fix issues with ad-hoc filters (#30931)\n  * LogsPanel: Add deduplication option for logs (#31019)\n  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)\n  * PluginManager: Remove some global state (#31081)\n  * test: update addDashboard flow for v7.4.0 changes (#31059)\n  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)\n  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)\n  * Usage stats: Adds source/distributor setting (#31039)\n  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)\n  * Chore: Replace native select with grafana ui select  (#31030)\n  * Docs: Update json-model.md (#31066)\n  * Docs: Update whats-new-in-v7-4.md (#31069)\n  * Added hyperlinks to Graphite documentation (#31064)\n  * DashboardSettings: Update to new form styles (#31022)\n  * CDN: Fixing drone CI config (#31052)\n  * convert path to posix by default (#31045)\n  * DashboardLinks: Fixes crash when link has no title (#31008)\n  * Alerting: Fixes so notification channels are properly deleted (#31040)\n  * Explore: Remove emotion error when displaying logs (#31026)\n  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)\n  * CDN: Adds uppload to CDN step to drone CI (#30879)\n  * Improved glossary (#31004)\n  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)\n  * Drone: Fix deployment image (#31027)\n  * ColorPicker: migrated styles from sass to emotion (#30909)\n  * Dashboard: Migrate general settings to react (#30914)\n  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)\n  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)\n  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)\n  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)\n  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)\n  * Graph: Fixes so graph is shown for non numeric time values (#30972)\n  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)\n  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)\n  * Build: Releases e2e and e2e-selectors too (#31006)\n  * TextPanel: Fixes so panel title is updated when variables change (#30884)\n  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)\n  * instrumentation: make the first database histogram bucket smaller (#30995)\n  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt… (#30988)\n  * StatPanel: Fixes issue formatting date values using unit option (#30979)\n  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)\n  * Units: Fixes formatting of duration units (#30982)\n  * Elasticsearch: Show Size setting for raw_data metric (#30980)\n  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)\n  * make sure service and slo display name is passed to segment comp (#30900)\n  * assign changes in cloud datasources to the new cloud datasources team (#30645)\n  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)\n  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)\n  * Docs: Add alias for what's new in 7.4 (#30945)\n  * e2e: extends selector factory to plugins (#30932)\n  * Chore: Upgrade docker build image (#30820)\n  * Docs: updated developer guide (#29978)\n  * Alerts: Update Alert storybook to show more states (#30908)\n  * Variables: Adds queryparam formatting option (#30858)\n  * Chore: pad unknown values with undefined (#30808)\n  * Transformers: add search to transform selection (#30854)\n  * Exemplars: change api to reflect latest changes (#30910)\n  * docs: use selinux relabelling on docker containers (#27685)\n  * Docs: Fix bad image path for alert notification template (#30911)\n  * Make value mappings correctly interpret numeric-like strings (#30893)\n  * Chore: Update latest.json (#30905)\n  * Docs: Update whats-new-in-v7-4.md (#30882)\n  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)\n  * test: add support for timeout to be passed in for addDatasource (#30736)\n  * increase page size and make sure the cache supports query params (#30892)\n  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)\n  * OAuth: custom username docs (#28400)\n  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)\n  * Alerting: Fixes alert panel header icon not showing (#30840)\n  * AlertingNG: Edit Alert Definition (#30676)\n  * Logging: sourcemap support for frontend stacktraces (#30590)\n  * Added 'Restart Grafana' topic. (#30844)\n  * Docs: Org, Team, and User Admin (#30756)\n  * bump grabpl version to 0.5.36 (#30874)\n  * Plugins: Requests validator (#30445)\n  * Docs: Update whats-new-in-v7-4.md (#30876)\n  * Docs: Add server view folder (#30849)\n  * Fixed image name and path  (#30871)\n  * Grafana-ui: fixes closing modals with escape key (#30745)\n  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)\n  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)\n  * Chart/Tooltip: refactored style declaration (#30824)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)\n  * Grafana-ui: fixes no data message in Table component (#30821)\n  * grafana/ui: Update pagination component for large number of pages (#30151)\n  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)\n  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)\n  * Chore: Remove panelTime.html, closes #30097 (#30842)\n  * Docs: Time series panel, bar alignment docs (#30780)\n  * Chore: add more docs annotations (#30847)\n  * Transforms: allow boolean in field calculations (#30802)\n  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)\n  * Update prometheus.md with image link fix (#30833)\n  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)\n  * Update license-expiration.md (#30839)\n  * Explore rewrite (#30804)\n  * Prometheus: Set type of labels to string (#30831)\n  * GrafanaUI: Add a way to persistently close InfoBox (#30716)\n  * Fix typo in transformer registry (#30712)\n  * Elasticsearch: Display errors with text responses (#30122)\n  * CDN: Fixes cdn path when Grafana is under sub path (#30822)\n  * TraceViewer: Fix lazy loading (#30700)\n  * FormField: migrated sass styling to emotion (#30392)\n  * AlertingNG: change API permissions (#30781)\n  * Variables: Clears drop down state when leaving dashboard (#30810)\n  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)\n  * Add missing callback dependency (#30797)\n  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)\n  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)\n  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)\n  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)\n  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)\n  * Add width for Variable Editors (#30791)\n  * Chore: Remove warning when calling resource (#30752)\n  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)\n  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)\n  * GraphNG: add bar alignment option (#30499)\n  * Expressions: Measure total transformation requests and elapsed time (#30514)\n  * Menu: Mark menu components as internal (#30740)\n  * TableInputCSV: migrated styles from sass to emotion (#30554)\n  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)\n  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)\n  * CDN: Adds support for serving assets over a CDN (#30691)\n  * PanelEdit: Trigger refresh when changing data source (#30744)\n  * Chore: remove __debug_bin (#30725)\n  * BarChart: add alpha bar chart panel (#30323)\n  * Docs: Time series panel (#30690)\n  * Backend Plugins: Convert test data source to use SDK contracts (#29916)\n  * Docs: Update whats-new-in-v7-4.md (#30747)\n  * Add link to Elasticsearch docs. (#30748)\n  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)\n  * TagsInput: Make placeholder configurable (#30718)\n  * Docs: Add config settings for fonts in reporting (#30421)\n  * Add menu.yaml to .gitignore (#30743)\n  * bump cypress to 6.3.0 (#30644)\n  * Datasource: Use json-iterator configuration compatible with standard library (#30732)\n  * AlertingNG: Update UX to use new PageToolbar component (#30680)\n  * Docs: Add usage insights export feature (#30376)\n  * skip symlinks to directories when generating plugin manifest (#30721)\n  * PluginCiE2E: Upgrade base images (#30696)\n  * Variables: Fixes so text format will show All instead of custom all (#30730)\n  * PanelLibrary: better handling of deleted panels (#30709)\n  * Added section 'Curated dashboards for Google Cloud Monitoring' for 7.4 What's New (#30724)\n  * Added 'curated dashboards' information and broke down, rearranged topics. (#30659)\n  * Transform: improve the 'outer join' performance/behavior (#30407)\n  * Add alt text to plugin logos (#30710)\n  * Deleted menu.yaml file (#30717)\n  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)\n  * Added entry for web server. (#30715)\n  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)\n  * Use connected GraphNG in Explore (#30707)\n  * Fix documentation for streaming data sources (#30704)\n  * PanelLibrary: changes casing of responses and adds meta property (#30668)\n  * Influx: Show all datapoints for dynamically windowed flux query (#30688)\n  * Trace: trace to logs design update (#30637)\n  * DeployImage: Switch base images to Debian (#30684)\n  * Chore: remove CSP debug logging line (#30689)\n  * Docs: 7.4 documentation for expressions (#30524)\n  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)\n  * Grafana-UI: Fix setting default value for MultiSelect (#30671)\n  * CustomScrollbar: migrated styles from sass to emotion (#30506)\n  * DashboardSettings & PanelEdit: Use new PageToolbar (#30675)\n  * Explore: Fix jumpy live tailing (#30650)\n  * ci(npm-publish): add missing github package token to env vars (#30665)\n  * PageToolbar: Extracting navbar styles & layout into a modern emotion based component (#30588)\n  * AlertingNG: pause/unpause definitions via the API (#30627)\n  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)\n  * Variables: Fixes display value when using capture groups in regex (#30636)\n  * Docs: Update _index.md (#30655)\n  * Docs: Auditing updates (#30433)\n  * Docs: add hidden_users configuration field (#30435)\n  * Docs: Define TLS/SSL terminology (#30533)\n  * Docs: Fix expressions enabled description (#30589)\n  * Docs: Update ES screenshots (#30598)\n  * Licensing Docs: Adding license restrictions docs (#30216)\n  * Update documentation-style-guide.md (#30611)\n  * Docs: Update queries.md (#30616)\n  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)\n  * DashboardSettings: fixes vertical scrolling (#30640)\n  * Usage Stats: Remove unused method for getting user stats (#30074)\n  * Grafana/UI: Unit picker should not set a category as unit (#30638)\n  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)\n  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)\n  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)\n  * Grafana/UI: Add disable prop to Segment (#30539)\n  * Variables: Fixes so queries work for numbers values too (#30602)\n  * Admin: Fixes so form values are filled in from backend (#30544)\n  * Docs: Add new override info and add whats new 7.4 links (#30615)\n  * TestData: Improve what's new in v7.4 (#30612)\n  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)\n  * NodeGraph: Add docs (#30504)\n  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)\n  * TimeRangePicker: Updates components to use new ToolbarButton & ButtonGroup (#30570)\n  * Update styling.md guide (#30594)\n  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)\n  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)\n  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)\n  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)\n  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)\n  * Explore: Fix logs hover state so that it is visible and in dark mode & simply hover code (#30572)\n  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)\n  * Add documentation for Exemplars (#30317)\n  * OldGraph: Fix height issue in Firefox (#30565)\n  * XY Chart: fix editor error with empty frame (no fields) (#30573)\n  * ButtonSelect & RefreshPicker: Rewrite of components to use new emotion based ToolbarButton & Menu (#30510)\n  * XY Chart: share legend config with timeseries (#30559)\n  * configuration.md: Document Content Security Policy options (#30413)\n  * DataFrame: cache frame/field index in field state (#30529)\n  * List + before -; rm old Git ref; reformat. (#30543)\n  * Expressions: Add option to disable feature (#30541)\n  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)\n  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)\n  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)\n  * Postgres: Convert tests to stdlib (#30536)\n  * Storybook: Migrate card story to use controls  (#30535)\n  * AlertingNG: Enable UI to Save Alert Definitions (#30394)\n  * Postgres: Be consistent about TLS/SSL terminology (#30532)\n  * Loki: Append refId to logs uid (#30418)\n  * Postgres: Fix indentation (#30531)\n  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)\n  * updates for e2e docker image (#30465)\n  * GraphNG: uPlot 1.6.2 (#30521)\n  * Docs: Update whats-new-in-v7-4.md (#30520)\n  * Prettier: ignore build and devenv dirs (#30501)\n  * Chore: Upgrade grabpl version (#30486)\n  * Explore: Update styling of buttons (#30493)\n  * Cloud Monitoring: Fix legend naming with display name override (#30440)\n  * GraphNG: Disable Plot logging by default (#30390)\n  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)\n  * Docs: include Makefile option for local assets (#30455)\n  * Footer: Fixes layout issue in footer  (#30443)\n  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)\n  * Docs: fix typo in what's new doc (#30489)\n  * Chore: adds wait to e2e test (#30488)\n  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)\n  * Dashboard: Remove Icon and change copy -> Copy to clipboard in the share embedded panel modal (#30480)\n  * Chore: fix spelling mistake (#30473)\n  * Chore: Restrict internal imports from other packages (#30453)\n  * Docs: What's new fixes and improvements (#30469)\n  * Timeseries: only migrage point size when configured (#30461)\n  * Alerting: Hides threshold handle for percentual thresholds (#30431)\n  * Graph: Fixes so only users with correct permissions can add annotations (#30419)\n  * Chore: update latest version to 7.4.0-beta1 (#30452)\n  * Docs: Add whats new 7.4 links (#30463)\n  * Update whats-new-in-v7-4.md (#30460)\n  * docs: 7.4 what's new (Add expressions note) (#30446)\n  * Chore: Upgrade build pipeline tool (#30456)\n  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)\n  * Expressions: Fix button icon (#30444)\n  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)\n  * Docs: Fix img link for alert notification template (#30436)\n  * grafana/ui: Fix internal import from grafana/data (#30439)\n  * prevent field config from being overwritten (#30437)\n  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)\n  * Dashboard: Remove template variables option from ShareModal (#30395)\n  * Added doc content for variables inspector code change by Hugo (#30408)\n  * Docs: update license expiration behavior for reporting (#30420)\n  * Chore: use old version format in package.json (#30430)\n  * Chore: upgrade NPM security vulnerabilities (#30397)\n  * 'Release: Updated versions in package to 7.5.0-pre.0' (#30428)\n  * contribute: Add backend and configuration guidelines for PRs (#30426)\n  * Chore: Update what's new URL (#30424)\n- Update to version 7.4.5\n- CVE-2021-28146, CVE-2021-28147: Fix API permissions issues related to team-sync. (Enterprise) (bsc#1183811, bsc#1183809)\n- CVE-2021-28148: Usage insights requires signed in users. (Enterprise) (bsc#1183813)\n- CVE-2021-27962: Do not allow editors to incorrectly bypass permissions on the default data source. (Enterprise) (bsc#1184371)\n","id":"openSUSE-SU-2021:2662-1","modified":"2021-08-12T10:02:06Z","published":"2021-08-12T10:02:06Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CQXNKFCX2C74T7LPZZCRD6GK2WWJTT4B/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183803"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183809"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183811"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183813"},{"type":"REPORT","url":"https://bugzilla.suse.com/1184371"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-27358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-27962"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-28146"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-28147"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-28148"}],"related":["CVE-2021-27358","CVE-2021-27962","CVE-2021-28146","CVE-2021-28147","CVE-2021-28148"],"summary":"Security update for grafana","upstream":["CVE-2021-27358","CVE-2021-27962","CVE-2021-28146","CVE-2021-28147","CVE-2021-28148"]}