CVE-2023-3128

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

• grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

• grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Grafana is validating Azure AD accounts based on the email claim.

On Azure AD, the profile email field is not unique and can be easily modified.

This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

These are all security issues fixed in the grafana-10.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

• grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update fixes the following issues:

grafana:

• Update to version 9.5.5:
  • CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694)
  • Bug fixes:
    • Auth: Show invite button if disable login form is set to false.
    • Azure: Fix Kusto auto-completion for Azure datasources.
    • RBAC: Remove legacy AC editor and admin role on new dashboard route.
    • API: Revert allowing editors to access GET /datasources.
    • Settings: Add ability to override skip_org_role_sync with Env variables.
• Update to version 9.5.3:
  • CVE-2023-2801: Query: Prevent crash while executing concurrent mixed queries (bsc#1212099)
  • CVE-2023-2183: Alerting: Require alert.notifications:write permissions to test receivers and templates (bsc#1212100)
• Update to version 9.5.2: Alerting: Scheduler use rule fingerprint instead of version. Explore: Update table min height. DataLinks: Encoded URL fixed. TimeSeries: Fix leading null-fill for missing intervals. Dashboard: Revert fixed header shown on mobile devices in the new panel header. PostgreSQL: Fix TLS certificate issue by downgrading lib/pq. Provisioning: Fix provisioning issues with legacy alerting and data source permissions. Alerting: Fix misleading status code in provisioning API. Loki: Fix log samples using instant queries. Panel Header: Implement new Panel Header on Angular Panels. Azure Monitor: Fix bug that was not showing resources for certain locations. Alerting: Fix panic when reparenting receivers to groups following an attempted rename via Provisioning. Cloudwatch Logs: Clarify Cloudwatch Logs Limits.
• Update to 9.5.1 Loki Variable Query Editor: Fix bug when the query is updated Expressions: Fix expression load with legacy UID -100

This update fixes the following issues:

grafana:

• Update to version 9.5.5:
  • CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694)
  • Bug fixes:
    • Auth: Show invite button if disable login form is set to false.
    • Azure: Fix Kusto auto-completion for Azure datasources.
    • RBAC: Remove legacy AC editor and admin role on new dashboard route.
    • API: Revert allowing editors to access GET /datasources.
    • Settings: Add ability to override skip_org_role_sync with Env variables.
• Update to version 9.5.3:
  • CVE-2023-2801: Query: Prevent crash while executing concurrent mixed queries (bsc#1212099)
  • CVE-2023-2183: Alerting: Require alert.notifications:write permissions to test receivers and templates (bsc#1212100)
• Update to version 9.5.2: Alerting: Scheduler use rule fingerprint instead of version. Explore: Update table min height. DataLinks: Encoded URL fixed. TimeSeries: Fix leading null-fill for missing intervals. Dashboard: Revert fixed header shown on mobile devices in the new panel header. PostgreSQL: Fix TLS certificate issue by downgrading lib/pq. Provisioning: Fix provisioning issues with legacy alerting and data source permissions. Alerting: Fix misleading status code in provisioning API. Loki: Fix log samples using instant queries. Panel Header: Implement new Panel Header on Angular Panels. Azure Monitor: Fix bug that was not showing resources for certain locations. Alerting: Fix panic when reparenting receivers to groups following an attempted rename via Provisioning. Cloudwatch Logs: Clarify Cloudwatch Logs Limits.
• Update to 9.5.1 Loki Variable Query Editor: Fix bug when the query is updated Expressions: Fix expression load with legacy UID -100

This update fixes the following issues:

grafana:

• Update to version 9.5.5:
  • CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694)
  • Bug fixes:
    • Auth: Show invite button if disable login form is set to false.
    • Azure: Fix Kusto auto-completion for Azure datasources.
    • RBAC: Remove legacy AC editor and admin role on new dashboard route.
    • API: Revert allowing editors to access GET /datasources.
    • Settings: Add ability to override skip_org_role_sync with Env variables.
• Update to version 9.5.3:
  • CVE-2023-2801: Query: Prevent crash while executing concurrent mixed queries (bsc#1212099)
  • CVE-2023-2183: Alerting: Require alert.notifications:write permissions to test receivers and templates (bsc#1212100)
• Update to version 9.5.2: Alerting: Scheduler use rule fingerprint instead of version. Explore: Update table min height. DataLinks: Encoded URL fixed. TimeSeries: Fix leading null-fill for missing intervals. Dashboard: Revert fixed header shown on mobile devices in the new panel header. PostgreSQL: Fix TLS certificate issue by downgrading lib/pq. Provisioning: Fix provisioning issues with legacy alerting and data source permissions. Alerting: Fix misleading status code in provisioning API. Loki: Fix log samples using instant queries. Panel Header: Implement new Panel Header on Angular Panels. Azure Monitor: Fix bug that was not showing resources for certain locations. Alerting: Fix panic when reparenting receivers to groups following an attempted rename via Provisioning. Cloudwatch Logs: Clarify Cloudwatch Logs Limits.
• Update to 9.5.1 Loki Variable Query Editor: Fix bug when the query is updated Expressions: Fix expression load with legacy UID -100

Maintenance update for SUSE Manager 4.3.7 Release Notes:

This is a codestream only update

This update fixes the following issues:

golang-github-QubitProducts-exporter_exporter:

• Exclude s390 arch
• Adapted to build on Enterprise Linux.
• Fix build for RedHat 7
• Require Go >= 1.14 also for CentOS
• Add support for CentOS
• Replace %{?systemd_requires} with %{?systemd_ordering}

golang-github-boynux-squid_exporter:

• Exclude s390 architecture (gh#SUSE/spacewalk#19050)
• Enhanced to build on Enterprise Linux 8.

golang-github-lusitaniae-apache_exporter:

• Do not strip if SUSE Linux Enterprise 15 SP3
• Exclude debug for RHEL >= 8
• Build with Go >= 1.20 when the OS is not RHEL
• Fix apparmor profile for SLE 12
• Upgrade to version 1.0.0 (jsc#PED-5405)
  • Improved flag parsing
  • Added support for custom headers
• Build using promu
• Fix sandboxing options
• Upgrade to version 0.13.4
  • CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501)
• Upgrade to version 0.13.3
  • CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270)
• Upgrade to version 0.13.1
  • Fix panic caused by missing flagConfig options
• Upgrade to version 0.13.0
  • CVE-2022-46146: Fix authentication bypass vulnarability (bsc#1208046)
• Corrected comment in AppArmor profile
• Added AppArmor profile
• Added sandboxing options to systemd service unit
• Exclude s390 architecture (gh#SUSE/spacewalk#19050)
• Update to upstream release 0.11.0 (jsc#SLE-24791)
  • Add TLS support
  • Switch to logger, please check --log.level and --log.format flags
• Update to version 0.10.1
  • Bugfix: Reset ProxyBalancer metrics on each scrape to remove stale data
• Update to version 0.10.0
  • Add Apache Proxy and other metrics
• Update to version 0.8.0
  • Change commandline flags
  • Add metrics: Apache version, request duration total
• Adapted to build on Enterprise Linux 8
• Require building with Go 1.15
• Add support for RedHat 8
  • Adjust dependencies on spec file
  • Disable dwarf compression in go build
• Add support for Red Hat
• Add %license macro for LICENSE file

golang-github-prometheus-alertmanager:

• Do not create PIE for s390x architecture
• Require Go 1.20 or newer for building
• Remove not used build flags
• Create position independent executables (PIE)
• Disable striping the binaries only for SLE 15 SP3
• Add System/Monitoring group tag
• Rework service file to use obscpio
  • Run tar and recompress services at buildtime
  • Do not generate automatically changelog entries
• Update to version 0.26.0 (jsc#PED-7353): https://github.com/prometheus/alertmanager/releases/tag/v0.26.0
  • CVE-2023-40577: Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI (bsc#1218838)
  • Configuration: Fix empty list of receivers and inhibit_rules would cause the alertmanager to crash
  • Templating: Fixed a race condition when using the title function. It is now race-safe
  • API: Fixed duplicate receiver names in the api/v2/receivers API endpoint
  • API: Attempting to delete a silence now returns the correct status code, 404 instead of 500
  • Clustering: Fixes a panic when tls_client_config is empty
  • Webhook: url is now marked as a secret. It will no longer show up in the logs as clear-text
  • Metrics: New label reason for alertmanager_notifications_failed_total metric to indicate the type of error of the alert delivery
  • Clustering: New flag --cluster.label, to help to block any traffic that is not meant for the cluster
  • Integrations: Add Microsoft Teams as a supported integration
• Update to version 0.25.0: https://github.com/prometheus/alertmanager/releases/tag/v0.25.0
  • Fail configuration loading if api_key and api_key_file are defined at the same time
  • Fix the alertmanager_alerts metric to avoid counting resolved alerts as active. Also added a new alertmanager_marked_alerts metric that retain the old behavior
  • Trim contents of Slack API URLs when reading from files
  • amtool: Avoid panic when the label value matcher is empty
  • Fail configuration…

This update fixes the following issues:

ansible:

• Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133)
  • bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive info in traceback error message (in 2.9.27)
  • bsc#1188061 CVE-2021-3583 Template Injection through yaml multi-line strings with ansible facts used in template. (in 2.9.23)
  • bsc#1176460 gh#ansible/ansible#72094 ansible module nmcli is broken in ansible 2.9.13 (in 2.9.15)
• Update to 2.9.22:
  • CVE-2021-3447 (bsc#1183684) multiple modules expose secured values
  • CVE-2021-20228 (bsc#1181935) basic.py no_log with fallback option
  • CVE-2021-20191 (bsc#1181119) multiple collections exposes secured values
  • CVE-2021-20180 (bsc#1180942) bitbucket_pipeline_variable exposes sensitive values
  • CVE-2021-20178 (bsc#1180816) user data leak in snmp_facts module

dracut-saltboot:

• Update to version 0.1.1681904360.84ef141
  • Load network configuration even when missing protocol version (bsc#1210640)
• Update to verion 0.1.1674034019.a93ff61
  • Install copied wicked config as client.xml (bsc#1205599)
• Update to version 0.1.1673279145.e7616bd
  • Add failsafe stop file when salt-minion does not stop (bsc#1172110)
  • Copy existing wicked config instead of generating new (bsc#1205599)
• Update to version 0.1.1665997480.587fa10
  • Add dependencies on xz and gzip to support compressed images
• Update to version 0.1.1661440542.6cbe0da
  • Use standard susemanager.conf
  • Move image services to dracut-saltboot package
  • Use salt bundle
• Require e2fsprogs (bsc#1202614)
• Update to version 0.1.1657643023.0d694ce
  • Update dracut-saltboot dependencies (bsc#1200970)
  • Fix network loading when ipappend is used in pxe config
  • Add new information messages

golang-github-QubitProducts-exporter_exporter:

• Remove license file from %doc
• Exclude s390 arch
• Adapted to build on Enterprise Linux.
• Fix build for RedHat 7
• Require Go >= 1.14 also for CentOS
• Add support for CentOS
• Replace %{?systemd_requires} with %{?systemd_ordering}

golang-github-boynux-squid_exporter:

• Exclude s390 architecture (gh#SUSE/spacewalk#19050)
• Enhanced to build on Enterprise Linux 8.

golang-github-lusitaniae-apache_exporter:

• Do not strip if SUSE Linux Enterprise 15 SP3
• Exclude debug for RHEL >= 8
• Build with Go >= 1.20 when the OS is not RHEL
• Spec file clean up
• Fix apparmor profile for SLE 12
• Do not build with apparmor profile for SLE 12
• Upgrade to version 1.0.0 (jsc#PED-5405)
  • Improved flag parsing
  • Added support for custom headers
• Build with Go 1.19
• Build using promu
• Add _service file
• Fix sandboxing options
• Upgrade to version 0.13.4
  • Fix denial of service vulnerability (CVE-2022-32149, bsc#1204501)
• Upgrade to version 0.13.3
  • Fix uncontrolled resource consumption (CVE-2022-41723, bsc#1208270)
• Upgrade to version 0.13.1
  • Fix panic caused by missing flagConfig options
• Upgrade to version 0.13.0
  • Fix authentication bypass vulnarability (CVE-2022-46146, bsc#1208046)
• Corrected comment in AppArmor profile
• Added AppArmor profile
• Added sandboxing options to systemd service unit
• Exclude s390 architecture (gh#SUSE/spacewalk#19050)
• Update to upstream release 0.11.0 (jsc#SLE-24791)
  • Add TLS support
  • Switch to logger, please check --log.level and --log.format flags
• Update to version 0.10.1
  • Bugfix: Reset ProxyBalancer metrics on each scrape to remove stale data
• Update to version 0.10.0
  • Add Apache Proxy and other metrics
• Update to version 0.8.0
  • Change commandline flags
  • Add metrics: Apache version, request duration total
• Adapted to build on Enterprise Linux 8
• Require building with Go 1.15
• Add support for RedHat 8
  • Adjust dependencies on spec file
  • Disable dwarf compression in go build
• Add support for Red Hat
• Add %license macro for LICENSE file

golang-github-prometheus-prometheus:

• Update to 2.45.0 (jsc#PED-5406):
  • [FEATURE] API:…

This update fixes the following issues:

golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 (jsc#PED-11649):

• Security issues fixed:

  • CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling (bsc#1232970)

• Highlights of other changes:

  • Performance:
    • Significant enhancements to PromQL execution speed, TSDB operations (especially querying and compaction) and remote write operations.
    • Default GOGC value lowered to 75 for better memory management.
    • Option to limit memory usage from dropped targets added.
  • New Features:
    • Experimental OpenTelemetry ingestion.
    • Automatic memory limit handling.
    • Native histogram support, including new functions, UI enhancements, and improved scraping.
    • Improved alerting features, such as relabeling rules for AlertmanagerConfig and a new query_offset option.
    • Expanded service discovery options with added metadata and support for new services.
    • New promtool commands for PromQL formatting, label manipulation, metric pushing, and OpenMetrics dumping.
  • Bug Fixes:
    • Numerous fixes across scraping, API, TSDB, PromQL, and service discovery.
  • For a detailed list of changes consult the package changelog or https://github.com/prometheus/prometheus/compare/v2.45.6...v2.53.3

golang-github-prometheus-promu was updated to version 0.17.0:

• Added codesign utility function

grafana was updated from version 9.5.18 to 10.4.13 (jsc#PED-11591,jsc#PED-11649):

• Security issues fixed:

  • CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto (bsc#1234554)
  • CVE-2023-3128: Fixed authentication bypass using Azure AD OAuth (bsc#1212641)
  • CVE-2023-6152: Add email verification when updating user email (bsc#1219912)
  • CVE-2024-6837: Fixed potential data source permission escalation (bsc#1236301)
  • CVE-2024-8118: Fixed permission on external alerting rule write endpoint (bsc#1231024)

• Potential breaking changes in version 10:

  • In panels using the extract fields transformation, where one of the extracted names collides with one of the already existing ields, the extracted field will be renamed.
  • For the existing backend mode users who have table visualization might see some inconsistencies on their panels. We have updated the table column naming. This will potentially affect field transformations and/or field overrides. To resolve this either: update transformation or field override.
  • For the existing backend mode users who have Transformations with the time field, might see their transformations are not working. Those panels that have broken transformations will fail to render. This is because we changed the field key. To resolve this either: Remove the affected panel and re-create it; Select the Time field again; Edit the time field as Time for transformation in panel.json or dashboard.json
  • The following data source permission endpoints have been removed: GET /datasources/:datasourceId/permissions POST /api/datasources/:datasourceId/permissions DELETE /datasources/:datasourceId/permissions POST /datasources/:datasourceId/enable-permissions POST /datasources/:datasourceId/disable-permissions
    • Please use the following endpoints instead: GET /api/access-control/datasources/:uid for listing data source permissions POST /api/access-control/datasources/:uid/users/:id, POST /api/access-control/datasources/:uid/teams/:id and POST /api/access-control/datasources/:uid/buildInRoles/:id for adding or removing data source permissions
  • If you are using Terraform Grafana provider to manage data source permissions, you will need to upgrade your provider.
  • For the existing backend mode users who have table visualization might see some inconsistencies on their panels. …

This update fixes the following issues:

dracut-saltboot was updated to version 0.1.1728559936.c16d4fb:

• Added MAC based terminal naming option (jsc#SUMA-314)

golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 (jsc#PED-11649):

• Security issues fixed:

  • CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling (bsc#1232970)

• Highlights of other changes:

  • Performance:
    • Significant enhancements to PromQL execution speed, TSDB operations (especially querying and compaction) and remote write operations.
    • Default GOGC value lowered to 75 for better memory management.
    • Option to limit memory usage from dropped targets added.
  • New Features:
    • Experimental OpenTelemetry ingestion.
    • Automatic memory limit handling.
    • Native histogram support, including new functions, UI enhancements, and improved scraping.
    • Improved alerting features, such as relabeling rules for AlertmanagerConfig and a new query_offset option.
    • Expanded service discovery options with added metadata and support for new services.
    • New promtool commands for PromQL formatting, label manipulation, metric pushing, and OpenMetrics dumping.
  • Bug Fixes:
    • Numerous fixes across scraping, API, TSDB, PromQL, and service discovery.
  • For a detailed list of changes consult the package changelog or https://github.com/prometheus/prometheus/compare/v2.45.6...v2.53.3

grafana was updated from version 9.5.18 to 10.4.13 (jsc#PED-11591,jsc#PED-11649):

• Security issues fixed:

  • CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto (bsc#1234554)
  • CVE-2023-3128: Fixed authentication bypass using Azure AD OAuth (bsc#1212641)
  • CVE-2023-6152: Add email verification when updating user email (bsc#1219912)
  • CVE-2024-6837: Fixed potential data source permission escalation (bsc#1236301)
  • CVE-2024-8118: Fixed permission on external alerting rule write endpoint (bsc#1231024)

• Potential breaking changes in version 10:

  • In panels using the extract fields transformation, where one of the extracted names collides with one of the already existing ields, the extracted field will be renamed.
  • For the existing backend mode users who have table visualization might see some inconsistencies on their panels. We have updated the table column naming. This will potentially affect field transformations and/or field overrides. To resolve this either: update transformation or field override.
  • For the existing backend mode users who have Transformations with the time field, might see their transformations are not working. Those panels that have broken transformations will fail to render. This is because we changed the field key. To resolve this either: Remove the affected panel and re-create it; Select the Time field again; Edit the time field as Time for transformation in panel.json or dashboard.json
  • The following data source permission endpoints have been removed: GET /datasources/:datasourceId/permissions POST /api/datasources/:datasourceId/permissions DELETE /datasources/:datasourceId/permissions POST /datasources/:datasourceId/enable-permissions POST /datasources/:datasourceId/disable-permissions
    • Please use the following endpoints instead: GET /api/access-control/datasources/:uid for listing data source permissions POST /api/access-control/datasources/:uid/users/:id, POST /api/access-control/datasources/:uid/teams/:id and POST /api/access-control/datasources/:uid/buildInRoles/:id for adding or removing data source permissions
  • If you are using Terraform Grafana provider to manage data source permissions, you will need to upgrade your provider.
  • For the existing backend mode users who have table visualization might see some inconsistencies…

This update for grafana fixes the following issues:

grafana was updated from version 9.5.18 to 10.4.13 (jsc#PED-11591,jsc#PED-11649):

• Security issues fixed:

  • CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto (bsc#1234554)
  • CVE-2023-3128: Fixed authentication bypass using Azure AD OAuth (bsc#1212641)
  • CVE-2023-6152: Add email verification when updating user email (bsc#1219912)
  • CVE-2024-6837: Fixed potential data source permission escalation (bsc#1236301)
  • CVE-2024-8118: Fixed permission on external alerting rule write endpoint (bsc#1231024)

• Potential breaking changes in version 10:

  • In panels using the extract fields transformation, where one of the extracted names collides with one of the already existing ields, the extracted field will be renamed.
  • For the existing backend mode users who have table visualization might see some inconsistencies on their panels. We have updated the table column naming. This will potentially affect field transformations and/or field overrides. To resolve this either: update transformation or field override.
  • For the existing backend mode users who have Transformations with the time field, might see their transformations are not working. Those panels that have broken transformations will fail to render. This is because we changed the field key. To resolve this either: Remove the affected panel and re-create it; Select the Time field again; Edit the time field as Time for transformation in panel.json or dashboard.json
  • The following data source permission endpoints have been removed: GET /datasources/:datasourceId/permissions POST /api/datasources/:datasourceId/permissions DELETE /datasources/:datasourceId/permissions POST /datasources/:datasourceId/enable-permissions POST /datasources/:datasourceId/disable-permissions
    • Please use the following endpoints instead: GET /api/access-control/datasources/:uid for listing data source permissions POST /api/access-control/datasources/:uid/users/:id, POST /api/access-control/datasources/:uid/teams/:id and POST /api/access-control/datasources/:uid/buildInRoles/:id for adding or removing data source permissions
  • If you are using Terraform Grafana provider to manage data source permissions, you will need to upgrade your provider.
  • For the existing backend mode users who have table visualization might see some inconsistencies on their panels. We have updated the table column naming. This will potentially affect field transformations and/or field overrides.
  • The deprecated /playlists/{uid}/dashboards API endpoint has been removed. Dashboard information can be retrieved from the /dashboard/... APIs.
  • The PUT /api/folders/:uid endpoint no more supports modifying the folder's UID
  • Removed all components for the old panel header design.
  • Please review https://grafana.com/docs/grafana/next/breaking-changes/breaking-changes-v10-3/ for more details
  • OAuth role mapping enforcement: This change impacts GitHub, Gitlab, Okta, and Generic OAuth. To avoid overriding manually set roles, enable the skip_org_role_sync option in the Grafana configuration for your OAuth provider before upgrading
  • Angular has been deprecated
  • Grafana legacy alerting has been deprecated
  • API keys are migrating to service accounts
  • The experimental “dashboard previews” feature is removed
  • Usernames are now case-insensitive by default
  • Grafana OAuth integrations do not work anymore with email lookups
  • The “Alias” field in the CloudWatch data source is removed
  • Athena data source plugin must be updated to version >=2.9.3
  • Redshift data source plugin must be updated to version >=1.8.3
  • DoiT International BigQuery plugin no longer…