[ALSA-2026:54178] Moderate: grafana security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2026-08-13
Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Privilege escalation via dashboard overwrite (CVE-2026-33377) * grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default (CVE-2026-33376) * grafana: Grafana: Denial of Service via unbounded memory growth in OAuth login route (CVE-2026-8609) * grafana: Grafana: Denial of Service via excessive memory allocation from large API request payloads (CVE-2026-33382) Bug Fix(es) and Enhancement(s): * [grafana / rhel-10.2.z] Remove Lua ExclusiveArch macro for Konflux build (JIRA:AlmaLinux-188282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-10.2.6-28.el10_2.4.aarch64.rpm d44f8d15930e000611dccfed81a9580dabdcbbeb6e8eb8c50328855aeb0eceb2
aarch64 grafana-selinux-10.2.6-28.el10_2.4.aarch64.rpm dfc4bd4882a03737d050aebce457aa23f5e2baf2dac1756a99c4e70b707c275c
ppc64le grafana-selinux-10.2.6-28.el10_2.4.ppc64le.rpm 415c8af51a73ea0d7f8ef26eeb89c0e658bb900fdc687362b72c1cc9e29cc1d5
ppc64le grafana-10.2.6-28.el10_2.4.ppc64le.rpm 5fd6717ecca184097a73156dde6f00df2c8d8a941bed3c2a67a4a28db94e25ad
s390x grafana-selinux-10.2.6-28.el10_2.4.s390x.rpm 0e8dda8a7e29227691b4f6ec653ae1c8b44e7d7f8f499e955acac840e3e343e2
s390x grafana-10.2.6-28.el10_2.4.s390x.rpm d8f57b5c8a7066f3c0bb5a92ad22bf41e704254bfd69882f8c1205d1c2cf90cf
x86_64 grafana-10.2.6-28.el10_2.4.x86_64.rpm 97824da0e2fb86e9361120f9dc380c2b30de0056c09b75f41d378b113d0eded7
x86_64 grafana-selinux-10.2.6-28.el10_2.4.x86_64.rpm e027c152a86c7c2145a73c8a950aedcd5ef9ace4ba9e6905011801aee0d5d144
x86_64_v2 grafana-selinux-10.2.6-28.el10_2.4.x86_64_v2.rpm 2f61bfaf645239532e18a1c8b4bf0f520bce9a38364a3078cced4f3e9336afc4
x86_64_v2 grafana-10.2.6-28.el10_2.4.x86_64_v2.rpm b9da239f5dc112745aff9268951b326f91012d3bef3dc28e79681abfb2a84020
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.