Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
* net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031)
* net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
grafana-9.2.10-36.el8_10.aarch64.rpm |
2432428f87f8b2b1160256266a70d6212a3d9483d98ab4f2f0c8fb711018850c |
| aarch64 |
grafana-selinux-9.2.10-36.el8_10.aarch64.rpm |
e1f86622fe04cef430ddcb3db7fcbe97d676f642f7b071a0151d4beb7ee4aa57 |
| ppc64le |
grafana-selinux-9.2.10-36.el8_10.ppc64le.rpm |
25da20477eeb575c8f0b3bb1c38032734c2ab2381f7b2f28892e41daed38bdbd |
| ppc64le |
grafana-9.2.10-36.el8_10.ppc64le.rpm |
980ff4716ab0033a999bea7904cbc54cdd87b4671dc570b9740934f3828333b9 |
| s390x |
grafana-9.2.10-36.el8_10.s390x.rpm |
1aae0edf0df2ec259e4921f5a3b2e883455e2efd922a1b2dd9a3e6e77a162551 |
| s390x |
grafana-selinux-9.2.10-36.el8_10.s390x.rpm |
c08e8c98ea657119eeec1ec879c8ae3a5d7da731e759639595587a1e61c03482 |
| x86_64 |
grafana-9.2.10-36.el8_10.x86_64.rpm |
a06208a2f3c1b36fddd65f30733408bbdbe84d2188aec1f09f258a2bc8a29b82 |
| x86_64 |
grafana-selinux-9.2.10-36.el8_10.x86_64.rpm |
eb66cf9f6805179767a2af20772ac4622a376777e2ab4d384148d7d95ef55777 |
