Accepting request 1035683 from server:monitoring

OBS-URL: https://build.opensuse.org/request/show/1035683
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grafana?expand=0&rev=36

_service

@@ -5,7 +5,7 @@
     <param name="exclude">.git</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
-    <param name="revision">v8.5.13</param>
+    <param name="revision">v8.5.14</param>
     <param name="changesgenerate">enable</param>
   </service>
   <service name="recompress" mode="disabled">

_servicedata

@@ -1,6 +1,6 @@
 <servicedata>
   <service name="tar_scm">
     <param name="url">https://github.com/grafana/grafana</param>
-    <param name="changesrevision">38d274060d2dd6c4240edfdcc30d122e8120545d</param>
+    <param name="changesrevision">5bc88988a5a25c23452249315e8789ef059a2a3d</param>
   </service>
 </servicedata>

grafana-8.5.13.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0ed3ae71c9cc0d552709d1943e98ee2c7d46c39034f3016e2fb4e98ed556c234
-size 51533917

grafana-8.5.14.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a3a0e0161d454cb2585f0d5ebc58ada4c93420ea1c5bd6db5a1a42d0e93b9b8b
+size 51535752

grafana.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Fri Nov 11 09:06:30 UTC 2022 - witold.bedyk@suse.com
+
+- Update to version 8.5.14 (jsc#PED-2617):
+  * Security: Fix do not forward login cookie in outgoing requests
+    (bsc#1204303, CVE-2022-39201)
+  * Security: Make proxy endpoints not leak sensitive HTTP headers
+    (bsc#1204305, CVE-2022-31130)
+  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
+  * Security: Fix blocknig other users from signing in (bsc#1204304,
+    CVE-2022-39229)
+
 -------------------------------------------------------------------
 Wed Sep 21 11:37:55 UTC 2022 - witold.bedyk@suse.com
 

grafana.spec

@@ -22,7 +22,7 @@
 %endif
 
 Name:           grafana
-Version:        8.5.13
+Version:        8.5.14
 Release:        0
 Summary:        The open-source platform for monitoring and observability
 License:        AGPL-3.0-only

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:72d3f2660f4a8183cb4328735bffb91df16b1cc3c1d022cd4631f0dc4f87a019
-size 19588431
+oid sha256:dc8e7e00005270ac05622f186e395b8d6e0bec2a698a5cd3dbc121b34f17e40d
+size 19588498