Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
* grafana: Grafana: Information disclosure vulnerability in Unified Alerting (CVE-2026-17183)
* net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031)
* net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
grafana-selinux-10.2.6-23.el9_8.7.aarch64.rpm |
2677a0be74da1cc4e730ab0785fff7e167f2885beefbaeb4a15b0f64eb54bdb5 |
| aarch64 |
grafana-10.2.6-23.el9_8.7.aarch64.rpm |
7c3f40fc7ce21ac17830c58f0065f9fa57cb7a082c40a2303d08dfc0e02e1e94 |
| ppc64le |
grafana-10.2.6-23.el9_8.7.ppc64le.rpm |
88cafaec3ceb6f89cb285f95460ba59857df3eb384157c32da3a654d60b2b01f |
| ppc64le |
grafana-selinux-10.2.6-23.el9_8.7.ppc64le.rpm |
dedc71f1bd809703f43d90b6bedd45f018ea28d66975d80b8f6d9429a8a3dbd6 |
| s390x |
grafana-selinux-10.2.6-23.el9_8.7.s390x.rpm |
93da83c7c336440282ebc1ab3e63e956a65723d7a689e52b42b78cdf8826ef9a |
| s390x |
grafana-10.2.6-23.el9_8.7.s390x.rpm |
a8d430090e6ee633b9903951d124df0c80fd5f4764efabb7a1b7ba9854214ea6 |
| x86_64 |
grafana-selinux-10.2.6-23.el9_8.7.x86_64.rpm |
07ed8d2ac889efc4bf91d167969508ff2e2667d7ddc1735ffcc350880bebc2c8 |
| x86_64 |
grafana-10.2.6-23.el9_8.7.x86_64.rpm |
77607db0bcbd5a91d2034b80acd7265ae526e41091c19780d91f15551dd9ba62 |