[ALSA-2026:89744] Critical: grafana security update
Type:
security
Severity:
critical
Release date:
2026-10-26
Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure vulnerability in Unified Alerting (CVE-2026-17183) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 grafana-selinux-10.2.6-23.el9_8.7.aarch64.rpm 2677a0be74da1cc4e730ab0785fff7e167f2885beefbaeb4a15b0f64eb54bdb5
aarch64 grafana-10.2.6-23.el9_8.7.aarch64.rpm 7c3f40fc7ce21ac17830c58f0065f9fa57cb7a082c40a2303d08dfc0e02e1e94
ppc64le grafana-10.2.6-23.el9_8.7.ppc64le.rpm 88cafaec3ceb6f89cb285f95460ba59857df3eb384157c32da3a654d60b2b01f
ppc64le grafana-selinux-10.2.6-23.el9_8.7.ppc64le.rpm dedc71f1bd809703f43d90b6bedd45f018ea28d66975d80b8f6d9429a8a3dbd6
s390x grafana-selinux-10.2.6-23.el9_8.7.s390x.rpm 93da83c7c336440282ebc1ab3e63e956a65723d7a689e52b42b78cdf8826ef9a
s390x grafana-10.2.6-23.el9_8.7.s390x.rpm a8d430090e6ee633b9903951d124df0c80fd5f4764efabb7a1b7ba9854214ea6
x86_64 grafana-selinux-10.2.6-23.el9_8.7.x86_64.rpm 07ed8d2ac889efc4bf91d167969508ff2e2667d7ddc1735ffcc350880bebc2c8
x86_64 grafana-10.2.6-23.el9_8.7.x86_64.rpm 77607db0bcbd5a91d2034b80acd7265ae526e41091c19780d91f15551dd9ba62
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.