[ALSA-2026:88189] Important: grafana-pcp security update
Type:
security
Severity:
important
Release date:
2026-10-22
Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-pcp-5.1.1-19.el8_10.aarch64.rpm 90a27fc873c3190019aacefc26a40e430863559be4529dc01c16affe5e17afa8
ppc64le grafana-pcp-5.1.1-19.el8_10.ppc64le.rpm cd5e3ad197d8409a32cb2f40197e1ec0245ae2367ebd4874536e041df0e8898c
s390x grafana-pcp-5.1.1-19.el8_10.s390x.rpm 92ede2739288a6ae1ce848126a8f4eb5fd88c5bf845707ec79eec871eeb6085b
x86_64 grafana-pcp-5.1.1-19.el8_10.x86_64.rpm 031f98e308ff34955c7f8dc926ee9743a44ae94e65736289ad03d212aba4d3b9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.