[ALSA-2026:99020] Important: grafana-pcp security update
Type:
security
Severity:
important
Release date:
2026-11-12
Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input (CVE-2026-116591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-pcp-5.1.1-20.el8_10.aarch64.rpm 9c02135dc3a0b113f082315773d2b314de670948a8c820a0f4d164ad91a9beab
ppc64le grafana-pcp-5.1.1-20.el8_10.ppc64le.rpm ca4b0e5d829366107d983fdf140a93d518b00e5ae92860d2950b48f52ebcb5a9
s390x grafana-pcp-5.1.1-20.el8_10.s390x.rpm 149cddb85dc4f38f875f82b482a3a933a65a8a928f7466ebb2592e4351f6d78c
x86_64 grafana-pcp-5.1.1-20.el8_10.x86_64.rpm b34a1cbd121b03aaa3d601a105942e07f77b87afd88c182315d65b18694b88b7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.