[ALSA-2025:7475] Important: grafana security update
Type:
security
Severity:
important
Release date:
2025-07-02
Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-10.2.6-15.el10_0.aarch64.rpm 4cf3c4b4ac69fd9a5eed52c0e7a50bb2585a5c33b6d2912c5cd386c08aad3943
aarch64 grafana-selinux-10.2.6-15.el10_0.aarch64.rpm 995ee6f2cbdf3612ba25039b3a69c37e1ad2a6fb39aecf8d6359fefb7c488fc3
ppc64le grafana-10.2.6-15.el10_0.ppc64le.rpm 405494106fc1ec7a07baf5395f8446225abf3669d01313e6c8ab373671834195
ppc64le grafana-selinux-10.2.6-15.el10_0.ppc64le.rpm d27c51c13607e8423363ac2489c6dba0947735ca96016d2bb5c99a7df2136e9f
s390x grafana-selinux-10.2.6-15.el10_0.s390x.rpm a0a412e6fce7dbd1861c645fef14d565bf6adaf4d7299d4f8f2f1e14a0d4d193
s390x grafana-10.2.6-15.el10_0.s390x.rpm ef888c66279e6be0b03f02887dddd4d80e0fa1bde6cd166659bec119bead4296
x86_64 grafana-selinux-10.2.6-15.el10_0.x86_64.rpm 8cae177ed2437556b908d44e39608aedf7aa2997fd2ef435d8c118a47b5dd885
x86_64 grafana-10.2.6-15.el10_0.x86_64.rpm ce726a48f570953d5e5317fdbc5cd716d93c232eab834fafc064c916b9552ff7
x86_64_v2 grafana-10.2.6-15.el10_0.x86_64_v2.rpm 209284571e211521651de6fcdca23053655d9d2961d53f66faeae1cec93bf14e
x86_64_v2 grafana-selinux-10.2.6-15.el10_0.x86_64_v2.rpm a3f3afaff586b46d10a11da98dab6f0794ba009e6e36a37ce30cb9a385b8e4c2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.