Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031)
* net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
grafana-pcp-5.1.1-17.el9_8.2.aarch64.rpm |
d1a70fb2e8f0a375ee37d9bc08e87223041ec58bd20be7be012d3dd966e84b01 |
| ppc64le |
grafana-pcp-5.1.1-17.el9_8.2.ppc64le.rpm |
afa7529ee5e8bfdeabb076af26c8374549be7d1260af5b1dae0d8355e74faa6f |
| s390x |
grafana-pcp-5.1.1-17.el9_8.2.s390x.rpm |
1507844068e20a1fcff123af55a9164f0adb0ab34c436f81f9e9e1fc912fa92b |
| x86_64 |
grafana-pcp-5.1.1-17.el9_8.2.x86_64.rpm |
cb943df15d662e1ef2f54f8623f23ec3351005f994d4c290edbfc6058d25bdf7 |