[ALSA-2026:88316] Important: grafana-pcp security update
Type:
security
Severity:
important
Release date:
2026-10-23
Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-pcp-5.3.0-8.el10_2.2.aarch64.rpm 325711764c4bb6600e32b7af48093f6b840b4dc36056e2d9daa08f146a14198c
ppc64le grafana-pcp-5.3.0-8.el10_2.2.ppc64le.rpm 0a499a637bca76603551d40971fec5ead38d7f696def27c18fff3173c82753a4
s390x grafana-pcp-5.3.0-8.el10_2.2.s390x.rpm 29c631cc0a57f6b080248cffc39999ae492b141c81f8bb3a05b9a8c64b9439ec
x86_64 grafana-pcp-5.3.0-8.el10_2.2.x86_64.rpm 3ed11d304c8172aa2feafe55c101f249a9c66ad0e0599ba905a79677680e1e5b
x86_64_v2 grafana-pcp-5.3.0-8.el10_2.2.x86_64_v2.rpm d18b091e8bfefa5d77182c7903b02ef77e56b0bcbc511213bdbc6959d8fc8209
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.