Security update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-

Announcement ID: SUSE-SU-2020:2911-1
Rating: critical
References:
Cross-References:
CVSS scores:
  • CVE-2016-0775 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
  • CVE-2018-17954 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2018-17954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2018-18623 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2018-18623 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2018-18624 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2018-18624 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2018-18625 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2018-18625 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2019-15043 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  • CVE-2019-15043 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2020-10177 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
  • CVE-2020-10177 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
  • CVE-2020-10378 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
  • CVE-2020-10744 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
  • CVE-2020-10744 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
  • CVE-2020-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
  • CVE-2020-10994 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
  • CVE-2020-11110 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2020-11110 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
  • CVE-2020-12052 ( SUSE ): 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
  • CVE-2020-12052 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2020-13379 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE-2020-13379 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
  • CVE-2020-1733 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
  • CVE-2020-1733 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
  • CVE-2020-17376 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
  • CVE-2020-17376 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Affected Products:
  • SUSE Linux Enterprise High Performance Computing 12 SP2
  • SUSE Linux Enterprise Server 12 SP2
  • SUSE OpenStack Cloud 7

An update that solves 15 vulnerabilities and contains two features can now be installed.

Description:

This update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano, openstack-neutron, openstack-neutron-vpnaas, openstack-nova, openstack-sahara, python-Pillow, rubygem-crowbar-client fixes the following issues:

Security fixes included on this update:

for ansible: - CVE-2020-1733,CVE-2020-10744: Fixed a race condition and insecure permissions which could have allowed another user on the node to gain control of the become user (bsc#1171823 and bsc#1164140).

for grafana: - CVE-2020-11110, CVE-2018-18623, CVE-2018-18624, CVE-2018-18625: Fixed XSS vulnerabilities in dashboard due to an incomplete fix for CVE-2018-12099

for openstack-nova:

  • CVE-2020-17376: Fixed an issue in which live migration failed to update persistent domain XML (bsc#1175484)

for python-pillow: - CVE-2016-0775: Fixed a buffer overflow in FliDecode.c (bsc#965582) - CVE-2020-10177: Fix-OOB-reads-in-FLI-decoding (bsc#1173413) - CVE-2020-10994: Fix-bounds-overflow-in-JPEG-2000-decoding (bsc#1173418) - CVE-2020-10378: Fix-bounds-overflow-in-PCX-decoding (bsc#1173416)

for rubygem-crowbar-client: - CVE-2018-17954: Fixed an issue where provision leaks admin password to all nodes in cleartext (bsc#1117080)

Non-security fixes included on this update:

Changes in ansible: - Update CVE-2020-10744_avoid_mkdir_p.patch to include missing parts and rename to CVE-2020-1733_avoid_mkdir_p.patch to make it clear which CVE is fixed there (bsc#1164140)

  • Add CVE-2020-10744_avoid_mkdir_p.patch (bsc#1171823) to fix insecure temporary directory creation.

Changes in crowbar-core: - Update to version 4.0+git.1600767499.0615a418f: * provisioner: check for client_user (SOC-11389) * crowbar: Also add access to /restricted/ in SSL vhost (SOC-11352) * crowbar: Allow hardware-installing -> discovering transition (noref) * crowbar: Add Restricted controller with API for restricted clients (bsc#1117080) * crowbar: Add complete list of states to Crowbar::State (noref) * provisioner: Remove the need for /updates/parse_node_data (noref) * crowbar: Create helper module to validate states (noref) * provisioner: Use new restricted API (bsc#1117080) * provisioner: Do not read /etc/crowbar.install.key from crowbar_joi (bsc#1117080) * provisioner: Remove use of privileged user for Windows machine (bsc#1117080) * provisioner: Use restricted client during provisioning (bsc#1117080) * provisioner: Use restricted client for crowbar_register (bsc#1117080) * provisioner: Drop /etc/crowbar.install.key bits from autoyast prof (bsc#1117080) * Avoid hardcoding machine-install user (bsc#1117080) * crowbar: Restrict admin access (bsc#1117080)

  • Update to version 4.0+git.1600416364.5a9286e31:
  • Whitelist fixed CVEs in travis (noref)
  • Disable cookbook tests (noref)

Changes in crowbar-openstack: - Update to version 4.0+git.1599037255.25b759234: * horizon: Update configuration for Grafana 5.x

Changes in grafana: - BuildRequire go1.14 explicitly - Add recompress source service - Add go_modules source service to create vendor.tar.gz containing 3rd party go modules. - Adjust spec to work for Grafana-6.7.4 - Adjust Makefile to work for Grafana-6.7.4 - Remove CVE-2019-15043.patch (merged upstream) - Remove CVE-2020-13379.patch (merged upstream) - Remove 0001-CVE-2020-12052-bsc1170657-XSS-annotation-popup-vulnerability.patch (merged upstream) - Update to version 6.7.4 (bsc#1172450, CVE-2018-18623, CVE-2018-18624, CVE-2018-18625, bsc#1174583, CVE-2020-11110) * Only allow 32 hexadecimal digits for the avatar hash * 6.7.3 cherry-picks (#23808) * Fix CI for pushing a multi-architecture manifest (#23327) * AzureMonitor: Fix Log Analytics and Application Insights for Azure China (#21803) (#22753) * Revert "grafana/data: PanelTypeChangedHandler API update to use PanelModel instead of panel options object [BREAKING] (#22754)" * Bumped version * Snapshots: Sanitize orignal url (#23254) * Plugins: Expose promiseToDigest (#23249) * Variables: Do not update variable from url when value is the same (#23220) * DashboardSave: Add new dashboard check (#23104) * Fix: reverted back to import * as module instead of using namespaces (#23069) * BackendSrv: Adds config to response to fix external plugins that use this (#23032) * DataLinks: make sure we use the correct datapoint when dataset contains null value. (#22981) * Fix mysterious Babel plugin errors (#22974) * Select: Fixed select text positition (#22952) * grafana/data: PanelTypeChangedHandler API update to use PanelModel instead of panel options object [BREAKING] (#22754) * Docs: Fix Broken Link (#22894) * Panels: Fixed size issue with panels when existing panel edit mode (#22912) * Azure: Fixed dropdowns not showing current value (#22914) * BackendSrv: only add content-type on POST, PUT requests (#22910) * Check if the datasource is of type loki using meta.id instead of name. (#22877) * CircleCI: Pin grabpl to 0.1.0 (#22904) * Design tweaks (#22886) * Rich history UX fixes (#22783) * AzureMonitor: support workspaces function for template variables (#22882) * SQLStore: Add migration for adding index on annotation.alert_id (#22876) * Plugins: Return jsondetails as an json object instead of raw json on datasource healthchecks. (#22859) * Backend plugins: Exclude plugin metrics in Grafana's metrics endpoint (#22857) * Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node (#22856) * Stackdriver: Fix GCE auth bug when creating new data source (#22836) * @grafana/runtime: Add cancellation of queries to DataSourceWithBackend (#22818) * Rich history: Test coverage (#22852) * Datasource config was not mapped for datasource healthcheck (#22848) * upgrades plugin sdk to 0.30.0 (#22846) * Rich History: UX adjustments and fixes (#22729) * TablePanel: Enable new units picker (#22833) * Fix dashboard picker's props (#22815) * Grafana-UI: Add invalid state to Forms.Textarea (#22775) * SaveDashboard: Updated modal design/layout a bit (#22810) * Forms: Fix input suffix position (#22780) * AngularPanels: Fixed inner height calculation (#22796) * Fix: fixes issue with headers property with different casing (#22778) * DataSourceWithBackend: use /health endpoint for test (#22789) * Chore: remove expressions flag and allow (#22764) * Core: Pass the rest of to props to Select (#22776) * Add support for sending health check to datasource plugins. (#22771) * Datasource: making sure we are having the same data field order when using mixed data sources. (#22718) * DashboardSave: Autofocus save dashboard form input (#22748) * @grafana/e2e: cherry picked 4fecf5a7a65f5b7b4c03fefb9a3da15cee938f02 (#22739) * CircleCI: Implement new release pipeline (#22625) * Toolkit: use fs-extra instead of fs (#22723) * What's new docs for 6.7 release (#22721) * Backend Plugins: use sdk v0.26.0 (#22725) * PanelInspector: Add Stats Tab (#22683) * Revert "Graph: Improve point rendering performance (#22610)" (#22716) * Docs: add rendering configuration in reporting (#22715) * reverting the changes that failed the e2e tests. (#22714) * Remove multiple occurrences of "before" (#22710) * Datasources: Update dashboards (#22476) * API: Fix redirect issues (#22285) * Explore: adds QueryRowErrors component, moves error display to QueryRow (#22438) * RichHistory: Design Tweaks (#22703) * Modals: Unify angular/react modals backdrop color (#22708) * Graphite: Don't issue empty "select metric" queries (#22699) * support duplicate field names in arrow format (#22705) * UX: Update new form styles to dark inputs (#22701) * Docs: Grammar corrections * Docs: Overcoming Grammatical errors (#22707) * Pass dashboard via angular directive (#22696) * Docs: Replace "API" by "Integration" key for PagerDuty (#22639) * Docs: Edited Enterprise docs (#22602) * CloudWatch: Expand alias variables when query yields no result (#22695) * Dependency: sdk's dataframe package renamed to data (#22700) * @grafana/e2e: include Cypress tsconfig in published package (#22698) * Graphite: Update config editor (#22553) * @grafana/e2e: fix runtime ts-loader errors with Cypress support files (#22688) * Docs: Add version note about Azure AD OAuth2 (#22692) * StatPanel: Return base color when there is no value set (#22690) * Send jsondata for Datasources on DatasourceConfig for backend plugins (#22681) * Explore: Rich History (#22570) * XSS: Fixed history XSS issue (#22680) * Fix caching problem (#22473) * on update for checkbox and switch (#22656) * Notification Channel: Make test button wider (#22653) * Backend plugins: Updates due to changes in SDK (#22649) * Make sure commit hook in FieldPropertiesEditor is invalidated when value changes (#22673) * Docs: Plugin.json: Fix property descriptions, add missing properties, add example (#22281) * Alerting: Fixed bad background color for default notifications in alert tab (#22660) * Webpack: Updated terser plugin (#22669) * Core: DashboardPicker improvements (#22619) * Storybook: Forms.Form docs (#22654) * Templating: Migrates some variable types from Angular to React/Redux (#22434) * Grafana UI: Fix Forms.Select onChangeWithEmpty (#22647) * Azure Monitor: Fix app insights source to allow for new timeFrom and __timeTo (#21879) * @grafana/e2e: install necessary dependencies for published package (#22657) * DashboardSave: Correctly overwrite dashboard when saving (#22650) * StatPanel: Fixes base color is being used for null values (#22646) * FieldOverrides: Add value mappings editor to standard config properties registry (#22648) * Docs: Update gauge.md (#22637) * Docs: Create Intro grafana (#22522) * Toolkit: wrap plugin signing stub with error checking (#22626) * @grafana/e2e: fix empty bundle files (#22607) * Toolkit: include a github release utility (#22520) * Rendering: Have phantomjs wait a bit before rendering to give fonts a change to load (#22623) * Cascader: Do not override default width behavior (#22620) * Update documentation-style-guide.md (#22581) * Adds signed in user to backend v2 plugins requests (#22584) * CloudWatch: updated namespaces - Athena, DocDB, and Route53Resolver (#22604) * Graph: Improve point rendering performance (#22610) * Alerting: Fix state age test failures (#22606) * Docs: Update image_rendering.md (#22586) * UI: Segment improvements (#22601) * remove section about alias imports (#22585) * Backend Plugins: Support handling of streaming resource response (#22580) * Stackdriver: Migrate GCE default project (#22593) * Toolkit: plugin ci needs to cooperate better with make/mage (#22588) * surround CloudWatch dimension names with double quotes (#22222) * Fix: when reloading page make sure that time picker history is converted to dateTime. * Core: add active users stat (#22563) * Chore: Modules tidy and vendor (#22578) * Loki: use series API for stream facetting (#21332) * Testing code owners for backend code (#22572) * Azure Monitor: config editor updates, update sameas switch, fix test snaps (#22554) * Grafana-UI: Use value for Radio group id (#22568) * Chore: fix moment import in alerting tests (#22567) * avoid aliased import in cli (#22566) * Chore: Avoid aliasing importing models in api package (#22492) * ShareModal: able to extend tabs (#22537) * Tests: fix alerting reducers tests (#22560) * Logs: Improve log level guess (#22094) * DataSourceWithBackend: apply template variables (#22558) * @grafana/e2e: added support for plugin repositories (#22546) * Add fallback to search_base_dns if group_search_base_dns is undefined. (#21263) * Docs: Added a Markdown Style Guide (#22425) * Old AsyncSelect: Add story (#22536) * Chore: add missing aria-label for rendered panel image (e2e tests) (#22543) * Form migrations: Dashboard- and TimeZonePicker (#22459) * Migration: Share dashboard/panel modal (#22436) * Revert "Select: scroll into view when navigate with up/down arrows (#22503)" (#22535) * Backend plugins: Prepare and clean request headers before resource calls (#22321) * Cascader: Add size for input (#22517) * ArrowDataFrame: allow empty results (#22524) * Migration: Save dashboard modals (#22395) * Toolkit: don't clean dist folder before build (#22521) * Docs: Add Storybook guidelines (#22465) * Docs: Removed menu links to SDK Reference until we are ready for 7.0 (#22509) * Stackdriver: Project selector (#22447) * Select: scroll into view when navigate with up/down arrows (#22503) * Elastic: To get fields, start with today's index and go backwards (#22318) * API: Include IP address when logging request error (#21596) * chore: avoid aliasing imports in services (#22499) * Grafana-UI: add storysource addon to Storybook (#22490) * canary 404 previous versions (#22495) * Fix Dockerfile lint errors (#22496) * Migration: Invite Signup (#22437) * Core: add hideFromMenu for child items (#22494) * Dashboard: Adds support for a global minimum dashboard refresh interval (#19416) * CI: Deploy enterprise image (#22488) * changelog: adds note about breaking change (#22480) * chore: avoid alias for models in plugins (#22483) * chore: avoid aliasing models in middleware (#22484) * Grafana UI: Add missing argument (#22487) * NewPanelEditor: Angular panel options, and angular component state to redux major change (#22448) * @grafana/ui: Create slider component (#22275) * Icons: add reports icon (#22445) * Panel inspect: Horizontal scrolling in Data table (#22245) * Alerting: Fixed the issue/bug of diff and percent_diff functions Breaking change (#21338) * App Plugins: support react pages in nav (#22428) * Optimized package.json files (#22475) * Toolkit: add junit reporting and jest.config.js to plugin build (#22450) * Grafana UI: Add forwardRef (#22466) * Docs: Update Getting started (#22422) * pkg/api/pluginproxy: Access token provider should handle access tokens without ExpiresOn field (#19928) * Documentation: Specify usage of datasource whitelist (#22412) * Form: Allow default values updates (#22435) * NewPanelEditor: Wait a bit before resending query result on panel editor exit (#22421) * Grafana-UI: update date picker (#22414) * grafana-cli: Upgrade to urfave/cli v2 (#22402) * Docs: adding first version of the auto-generated packages API docs. (#22107) * NewPanelEditor: Panel edit tweaks (#22415) * Core: Make application title customizable for WL (#22401) * Fix: making select to return empty list when no values are selected in multivalue mode. * Fix: Added missing "remove"-icon for light theme. * Docs: adding API reference documentation support for the packages libraries. (#21931) * Accessibility: Makes tag colors more accessible (#22398) * Admin: fix images on license page (#22413) * DataSourceWithBackend: Add a get/post resource standard path (#22408) * Docs: Fix examples, grammar, add links (#22406) * Docs: Add links, fix grammar, formatting, wording (#22381) * Changelog: adds missing enterprise features (#22399) * Docs: Add info on active LDAP sync (#22347) * Docs: Fixed formatting issue in new stat docs (#22390) * @grafana/toolkit: completed support for source maps in plugin builds (#22379) * UX: BackButton left arrow icon (#22369) * Scrollbar: Show scrollbar on only on hover (#22386) * NewPanelEditor: Fixed cleanup that could cause crash (#22384) * Theme: Fixed bug in sass file (#22382) * Alerting: Don't include image_url field with Slack message if empty (#22372) * Docs: New doc pages for panels Stat, Gauge & Bar Gauge (#22335) * Docs: Update front-end style guide (#22197) * Chore: Update latest.json (#22345) * CircleCI: Fix publishing of releases (#22342) * Changelog: v6.6.2 (#22341) * CircleCI: Switch to new master build pipeline (#22158) * Docs: Update white-labeling.md (#22224) * Webpack: Upgrade terser webpack plugin (#22332) * grafana/ui: Export TextArea under Forms namespace (#22328) * Suggesting couple of changes to the document (#22298) * Correcting Line 22 (#22292) * Docs: Fix "enable" steps formatting (#22324) * [Docs] Improvised instructions for adding data source. (#22305) * DashLinks: Add pull right to dropdown menu (#22233) * Migration: User invite (#22263) * Select: Fix focus issue and remove select container (#22309) * Annotations: Call panel refresh when table transform changes to annotations (#22323) * Docs: Couple of changes to the document (#22291) * Docs: Typo correction in Line 19 (#22297) * Rendering: Store render key in remote cache (#22031) * Backend Plugins: Provide proper plugin config to plugins (#21985) * New panel edit: data links tweaks (#22304) * Metrics: Add gauge for requests currently in flight (#22168) * OAuth: Enforce auto_assign_org_id setting when role mapping enabled using Generic OAuth (#22268) * CircleCI: Upgrade Ubuntu base image to 19.10 also for enterprise (#22315) * CI: check ubuntu and alpine images with trivy (#22314) * Docker: Upgrade Ubuntu to 19.10 (#22306) * grafana/data: runtime dependencies moved from devDependencies (#22283) * PanelInspector: Fixed issue in panel inspector (#22302) * grafana/ui: Add basic horizontal and vertical layout components (#22303) * Field Config Editors: Remove namespacing from standard field config editors (#22296) * CircleCI: Increase nodejs max memory (#22295) * Update rpm.md (#22284) * FieldConfigs: String select type & cell display mode added to table panel (#22274) * LinkSrv: Add newlines so I can read code * Docs: Fix TestData docs (#22279) * API: Improve recovery middleware when response already been written (#22256) * Update mac.md (#22280) * @grafana/toolkit: lint fix option now writes changes to disk (#22278) * Docs: minor fixes (#22223) * Reorder cipher suites for better security (#22101) * Docs: Minor typo fix (#22221) * NewPanelEdit: Add back datalinks and new table panel fix (#22267) * Prometheus: Implement region annotation (#22225) * Table: Fixed header alignment (#22236) * Data proxy: Log proxy errors using Grafana logger (#22174) * TimePicker: fixing weird behavior with calendar when switching between months/years (#22253) * Update timeseries.md (#20795) * Auth: Don't rotate auth token when requests are cancelled by client (#22106) * Elastic: Map level field based on config. (#22182) * Sqlstore: guard against getting a dashboard without specifying identi… (#22246) * Migrations: Signup page (#21514) * Storybook: Add color theme and theme switcher (#22005) * NewPanelEditor: Making angular panels reuse data and render on edit mode enter (#22229) * PanelEdit: Title tweaks (#22237) * NewPanelEdit: Minor changes (#22239) * Chore: Fixed strict null errors (#22238) * NewPanelEditor: Thresholds v2 (#22232) * Toolkit: support sass style for plugins (#22235) * add CloudWatch Usage Metrics (#22179) * FieldOverrides: Fix issue with same series name for every display value (#22234) * Inspector: find the datasource from the refId, not the metadata (#22231) * New panel editor: Persist panel editor ui state (#22210) * Toolkit: don't create declaration files for plugins (by default) (#22228) * Docs: Update windows.md (#22185) * Docs: Add linking topic (#21986) * Docs: Refactored Enterprise side menu (#22189) * CircleCI: Push master Docker images without revision in tag (#22218) * Alerting: Update the types of recipient supported by the Slack notifier (#22205) * docs: change URL occurences to uppercase (#22151) * Docs: Fix link for provisioning data sources (#22159) * DevEnv: update frontend dependencies - tests (#22140) * DevEnv: update frontend dependencies - type definitions (#22141) * Make Explore panel link work when grafana served from sub url (#22202) * DevEnv: update frontend dependencies - node (#22139) * API: Fix redirect issue when configured to use a subpath (#21652) * Inspect: Inspect header design update (#22120) * FieldOverrides: FieldOverrides UI (#22187) * Azure OAuth: enable teamsync (#22160) * Docs: Organize basic concepts and getting started (#21859) * FieldOverides: apply field overrides based on configuration (#22047) * Docs: Suggesting few changes to the doc (#22115) * Docs: Update phrasing line 35 (#22152) * Docs: Correcting Typo in Line131 (#22155) * Dashboard: fixed padding inconsistency * BackendSrv: Fixes a stupid mistake with a missing return (#22177) * PanelEdit: Fixed timing and state related issues (#22131) * Elastic: Replace range as number not string (#22173) * change sync target branch to master (#21930) * e2e: Fixed issue with aria label (#22166) * Fix: Do not remove whitespace in PanelLink url (#22087) * React Migration: Migrates FolderPicker from angular to react (#21088) * Auth: Azure AD OAuth (#20030) * DevEnv: update frontend dependencies - grunt (#22136) * Bugfix: updates cloudwatch query editor test async render to prevent it from throwing error (#22150) * NewPanelEdit: Design tweaks (#22156) * TestData: Update streaming.json (#22132) * DevEnv: update frontend dependencies - babel (#22135) * Docs: Fix port config list formatting (#22113) * Explore: Refactor active buttons css (#22124) * Forms/Switch: Simplifies and adjusts CSS/Markup (#22129) * Datasource/Loki: Fixes issue where live tailing displayed date as invalid (#22128) * NewPanelEditor: Fixed issue going back to dashboard after pull page reload (#22121) * Loki, Prometheus: Fix PromQL and LogQL syntax highlighting (#21944) * NewPanelEdit: Added visualization tab / selection view (#22117) * Increase ts fork check mem limit (#22118) * NewPanelEditor: Panel editor tabs in state (url) (#22102) * Delete report.20200209.125304.14262.0.001.json * Annotation & Alerts: Makes various annotation and alert requests cancelable (#22055) * Select zindex (#22109) * Docs: Add doc templates (#21927) * Fix mentioning Slack users/groups (#21734) * Docs: Update rules.md (#21989) * Docs: Update metrics.md (#21988) * Docs: Update dashboard.md (#21951) * Docs: Added release notes tag (#22012) * Forms/RadioButtonGroup: Improves semantics and simplifies CSS (#22093) * Docs: add LDAP active sync limitation for single bind configuration (#22098) * Docs: Update behind_proxy.md to include HTTPS and URL rewrite example (#21832) * DataLinks: Avoid null exception in new edit mode (#22100) * Docs: Image rendering improvements (#22084) * Fix display of multiline logs in log panel and explore (#22057) * Fix/add width to toggle button group (#21924) * NewPanelEditor: Introduce redux state and reducer (#22070) * Prometheus: make $__range more precise (#21722) * New panel edit: data links edit (#22077) * Docs: fix minor typos in datasources.md (#22092) * Toolkit: add a warning about tslint migration (#22089) * Read target prop from the links in the footer (#22074) * CircleCI: Publish enterprise Docker dev image for new master pipeline (#22091) * CircleCI: Include build ID in version for new master pipeline (#22013) * Alerting: Handle NaN in reducers (#22053) * Toolkit: create manifest files for plugins (#22056) * Backend Plugins: make transform work again (#22078) * Docs: Fix broken link (#22010) * Docs: Fix formatting typo (#22067) * CircleCI: Publish enterprise ARM variants from master pipeline (#22011) * Chore: Adds cancellation to backendSrv request function (#22066) * Dashboard: Move some plugin & panel state to redux (#22052) * Docs: Clarify that extraction of zip is required to install plugin (#22061) * Chore: Fixes non utc tests (#22063) * Grafana ui/time of day picker ui improvements (#21950) * Links: Assure base url when single stat, panel and data links are built (#21956) * BackendSrv: Returns correct error when a request is cancelled (#21992) * Make zoom and time shift work after emmitter change (#22051) * New Editor: refresh when time values change (#22049) * New Editor: Add ValuePicker for overrides selection (#22048) * Collapse: add a controlled collapse (#22046) * Cascader: Fix issue where the dropdown wouldn't show (#22045) * New Editor: add display modes to fix ratio with actual display (#22032) * Chore: Use forwardRef in ButtonSelect (#22042) * DashNavTimeControls: remove $injector and rootScope from time picker (#22041) * New panel edit: field overrides ui (#22036) * Select: Portaling for Select (#22040) * New Select: Fix the overflow issue and menu positioning (#22039) * Upgrade: React layout grid upgrade (#22038) * PanelChrome: Use react Panel Header for angular panels. (#21265) * New Editor: add a tabs row for the query section (#22037) * New Editor: use unit picker (#22033) * Dashboard: Refactor dashboard reducer & actions (#22021) * New panel editor: Add title editor (#22030) * UnitPicker: Use the new Cascader implementation (#22029) * FieldEditor: extendable FieldConfig UI (#21882) * Cascader: Add enable custom value (#21812) * New panel edit: support scrolling (#22026) * Thresholds: get theme from context automatically (#22025) * New Panel Edit: works for panels with and without queries (#22024) * PanelEditor: use splitpane for new editor (#22022) * Select: Fixed allow custom value in Select/UnitPicker/Segment/AsyncSegment (#22018) * Chore: export arrow dataframe utilities (#22016) * TSLint → ESLint (#21006) * Docker: Publish enterprise image with master-commit tag (#22008) * Chore: Resolve random failure with golangci-lint (#21970) * New panel edit: don't query when entering edit mode (#21921) * Fix bad grammar in Dashboard Link page (#21984) * Update documentation-style-guide.md (#21736) * Prometheus: Allow sub-second step in the prometheus datasource (#21861) * Update latest.json versions to 6.6.1 (#21972) * Change log for 6.6.1 (#21969) * Datasource: updates PromExploreQueryEditor to prevent it from throwing error on edit (#21605) * Explore: Adds Loki explore query editor (#21497) * @grafana/ui: Fix displaying of bars in React Graph (#21968) * Prometheus: Do not show rate hint when increase function is applied (#21955) * Elastic: Limit the number of datapoints for the counts query (#21937) * Storybook: Update categories (#21898) * Quota: Makes sure we provide the request context to the quota service (#21949) * Docs: Documentation for 6.6 Explore and Logs panel features (#21754) * Annotations: Change indices and rewrites annotation find query to improve database query performance (#21915) * Prometheus: Fixes default step value for annotation query (#21934) * Dashboard edit: Fix 404 when making dashboard editable * Publish from new master pipeline (#21813) * Metrics: Adds back missing summary quantiles (#21858) * delete redundant alias (#21907) * grafana/ui: Fix displaying of bars in React Graph (#21922) * Docs: Added developer-resources.md (#21806) * Fix formatting (#21894) * New Select: Blur input on select (#21876) * Fix/add default props to prom query editor (#21908) * Graph Panel: Fixed typo in thresholds form (#21903) * Disable logging in button (#21900) * DatasourceEditor: Add UI to edit custom HTTP headers (#17846) * Datasource: Show access (Browser/Server) select on the Prometheus datasource (#21833) * Docs: Update dashboard.md (#21896) * Docs: Update dashboard.md (#21200) * Docs: Make upgrading instructions for Docker work (#21836) * deps so can mock in tests (#21827) * Templating: Add new global built-in variables (#21790) * Fix: Reimplement HideFromTabs in Tabs component (#21863) * grafana/data: Remove unused PanelSize interface (#21877) * New Select: Extend creatable select api (#21869) * Backend plugins: Implement support for resources (#21805) * Docker: change plugin path in custom docker (#21837) * Image Rendering: Fix render of graph panel legend aligned to the right using Grafana image renderer plugin/service (#21854) * Docs: Update _index.md (#21700) * grafana/toolkit: Fix failing linter when there were lint issues (#21849) * DatasourceSettings: Fixed issue navigating away from data source settings page (#21841) * AppPageCtrl: Fix digest issue with app page initialisation (#21847) * Explore: adds basic tests to TableContainer checking the render and output on 0 series returned * Explore: adds MetaInfoText tests * Explore: adds export of MetaItem and its props * Explore: updates TableContainer to use MetaInfoText component * Explore: updates Logs component to use MetaInfoText component * Explore: adds MetaInfoText component * Explore: removes unnecessary styles for panel logs * Explore: updates Table container render to avoid rendering table on empty result * Explore: updates explore table container to show a span on 0 series returned * docs/cli: Fix documentation of reset-admin-password with --homepath (#21840) * Replace ts-loader with Babel (#21587) * Docs: Add information about license expiration (#21578) * Fix digest issue with query part editor's actions menu (#21834) * Graphite: Fixed issue with functions with multiple required params and no defaults caused params that could not be edited (groupByNodes groupByTags) (#21814) * TimePicker: Should display in kiosk mode (#21816) * Chore: Upgrade Storybook to 5.3.9 (#21550) * Table: Make the height of the table include header cells (#21824) * StatPanels: Fixed migration from old singlestat and default min & max being copied even when gauge was disbled (#21820) * Docs: Update docker image run and configuration instructions (#21705) * DataFrame: update golden test files (#21808) * Docs: Alphabetize datasource names in sidebar under docs/Features/DataSources (#21740) * Inspect: Add error tab (#21565) * Select: Fix direct usages of react-select to make the scroll great again (#21822) * TablePanel: display multi-line text (#20210) * Fixed strict errors (#21823) * Fix: prevents the BarGauge from exploding when the datasource returns empty result. (#21791) * Select: Fix scroll issue (#21795) * Fix: Fixes user logout for datasourceRequests with 401 from datasource (#21800) * Azure Monitor: Fix Application Insights API key field to allow input (#21738) * Influxdb: Fix cascader when doing log query in explore (#21787) * Devenv: OpenTSDB dashboard (#21797) * MSI: License for Enterprise (#21794) * OpenTSDB: Add back missing ngInject (#21796) * Heatmap: Legend color range is incorrect when using custom min/max (#21748) * Config: add meta feature toggle (#21786) * Logs panel: Rename labels to unique labels (#21783) * Add link guide for installing new renderer (#21702) * Chore: Lowers strict error limit (#21781) * Chore: Removes Cypress record (#21782) * Docs: Document configuration of console, file and syslog log formats (#21768) * Annotations: Fixes this.templateSrv.replace is not a function error for Grafana datasource (#21778) * Fix typos in the communication documentation (#21774) * Chore: Fixes various strict null errors (#21763) * Forms: Allow custom value creation in async select (#21759) * Chore: bump react-select to 3.0.8 (#21638) * grafana/data: Add type for secure json in DataSourceAPI (#21772) * Influxdb: Fix issues with request creation and parsing (#21743) * Explore/Loki: Fix handling of legacy log row context request (#21767) * 6.6.0 latest (#21762) * Docs: Updates Changelog for 6.6.0 (#21753) * Docs: Update image rendering (#21650) * Docs: misc. nitpicks to the HTTP API docs (#21758) * Dashboard: fixes issue with UI not being re-rendered after moving dashboard * Dashboard: fixed issues with re-rendering of UI when importing dashboard (#21723) * Build: Added devenv docker block for testing grafana with traefik. * Update What's new in 6.6 (#21745) * Footer: Display Grafana edition (#21717) * BackendSrv: Fixes POST body for form data (#21714) * Docs: Update CloudWatch and Stackdriver docs for 6.6 (#21679) * BackendSrv: Adds missing props back to response object in datasourceRequest (#21727) * Explore: Fix context view in logs, where some rows may have been filtered out. (#21729) * Toolkit: add canvas-mock to test setup (#21739) * TablePabel: Sanitize column link (#21735) * Docs: Fix getting started links on Windows installation page (#21724) * Docs: Enterprise 6.6 (#21666) * Template vars: Add error message for failed query var (#21731) * Loki: Refactor editor and syntax hooks (#21687) * Devenv: Fixed devenv dashboard template var datasource (#21715) * Footer: added back missing footer to login page (#21720) * Admin: Viewer should not see link to teams in side menu (#21716) * Annotations: Fix issue with annotation queries editors (#21712) * grafana/ui: Remove path import from grafana-data (#21707) * Loki: Fix Loki with repeated panels and interpolation for Explore (#21685) * CircleCI: Add workflow for building with Grafana Build Pipeline (#21449) * StatPanels: Fixed possible migration issue (#21681) * Make importDataSourcePlugin cancelable (#21430) * Docs: Update what's new in 6.6 (#21699) * Docs: Fix broken link in upgrade notes (#21698) * Alerting: Support passing tags to Pagerduty and allow notification on specific event categories (#21335) * PhantomJS: Fix rendering of panels using Prometheus datasource * backendSrv: Only stringifies request body if payload isn't already a string (#21639) * Update changelog generation to ignore not merged pull requests (#21641) * StatPanel: minor height tweak (#21663) * Circle: Introduce es-check to branches & pr workflow (#21677) * Run query when region, namespace and metric changes (#21633) * Explore: Fixes some LogDetailsRow markup (#21671) * SQLStore: Fix PostgreSQL failure to create organisation for first time (#21648) * Migrations: migrate admin user create page (#21506) * Docs: Whats new updates (#21664) * CloudWatch: Auto period snap to next higher period (#21659) * Login: Better auto sizing of login logo (#21645) * Chore: Fixes PhantomJs by adding polyfills for fetch and AbortController (#21655) * Alert: Minor tweak to work with license warnings (#21654) * Toolkit: copyIfNonExistent order swapped (#21653) * Doc: Update configuration.md (#21602) * Explore: Fix log level color and add tests (#21646) * Templating: A way to support object syntax for global vars (#21634) * CloudWatch: Add DynamoDB Accelerator (DAX) metrics & dimensions (#21644) * next version 6.7.0 (#21617) * latest.jso: Update latest beta 6.6.0-beta1 (#21623) * Docs: Update changelog with attribution (#21637) * Docs: Updated what's new article (#21624) * Plugins: Apply adhoc filter in Elasticsearch logs query (#21346) * Changelog: v6.6.0-beta1 (#21619) * Chore: Remove angular dependency from backendSrv (#20999) * Emotion: Add main package with version 10 (#21560) * TestData: allow negative values for random_walk parameters (#21627) * Update musl checksums (#21621) * CloudWatch: Expand dimension value in alias correctly (#21626) * Devenv: InfluxDB logs dashboard (#21620) * Build: adds missing filters required to build oss msi (#21618) * BigValue: Updated test dashboard and made some chart sizing tweaks (#21616) * TestData: Adds important new features to the random walk scenario (#21613) * graphite: does not modify last segment when... (#21588) * grafana/ui: Add synced timepickers styling to TimePicker (#21598) * Explore: Remove destructuring of empty state in LogRowMessage (#21579) * Build: enables deployment of enterprise msi (#21607) * CI: MSI for Enterprise (#21569) * E2E docs: Add guide to debuging PhantomJS (#21606) * Toolkit: fix prettier error reporting (#21599) * Render: Use https as protocol when rendering if HTTP2 enabled (#21600) * Typescript: null check fixes, and news panel fix (#21595) * Inspect: table take full height in drawer (#21580) * OAuth: Fix role mapping from id token (#20300) * ButtonCascader: Fix error in Explore (#21585) * CloudWatch: Fix ordering of map to resolve flaky test take 2 (#21577) * Redux: Fixed function adding a new reducer (#21575) * Minor style changes on upgrade page (#21566) * Revert "Babel: use babel-loader instead of ts-loader, ng-annotate with babel-plugin-angularjs-annotate (#21554)" (#21570) * Explore: Context tooltip to copy labels and values from graph (#21405) * Config: Use license info instead of build info for feature toggling (#21558) * Fix merge problem (#21574) * CloudWatch: Fix ordering of map to resolve flaky test (#21572) * Docs: What's new in Grafana v6.6 Draft (#21562) * Explore: Create unique ids and deduplicate Loki logs (#21493) * Chore: Fix go vet problem (#21568) * Provisioning: Start provision dashboards after Grafana server have started (#21564) * CloudWatch: Calculate period based on time range (#21471) * Inspect: Download DataFrame to Csv (#21549) * CloudWatch: Multi-valued template variable dimension alias fix (#21541) * Babel: use babel-loader instead of ts-loader, ng-annotate with babel-plugin-angularjs-annotate (#21554) * Stackdriver: Support meta labe