ELSA-2026-89744

ELSA-2026-89744 - grafana security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-10-26

Description

[10.2.6-23.7]
- CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting
- Resolves RHEL-290771

[10.2.6-23.6]
- Rebuild against updated golang
- Resolves RHEL-287510
- Resolves RHEL-279380
- Resolves RHEL-279012
- Resolves RHEL-278733

[10.2.6-23.5]
- Resolves RHEL-253159: CVE-2026-15815

[10.2.6-23.4]
- CVE-2026-42504 grafana: Golang MIME: Denial of Service via maliciously-crafted MIME header [rhel-9.8.z]
- Resolves RHEL-266519

Related CVEs

CVE-2026-111943

CVE-2026-17183

CVE-2026-78667

CVE-2026-78669

CVE-2026-97031

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	grafana-10.2.6-23.el9_8.7.src.rpm	332eca97a4ad26d42a7668be152a21d5a3db8d2bee67725df0b781e6b16f268f	-	ol9_aarch64_appstream
	grafana-10.2.6-23.el9_8.7.aarch64.rpm	9f73d504a10657a69fe2905aa9a442ba3f4b7a4e700a817fd7ce1d47f64549a7	-	ol9_aarch64_appstream
	grafana-selinux-10.2.6-23.el9_8.7.aarch64.rpm	7324456eb9bbd237e1e455cea82934f5e43683ba83dacea197a858fc72235dda	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	grafana-10.2.6-23.el9_8.7.src.rpm	332eca97a4ad26d42a7668be152a21d5a3db8d2bee67725df0b781e6b16f268f	-	ol9_x86_64_appstream
	grafana-10.2.6-23.el9_8.7.x86_64.rpm	d0151d34593551f04a5110e04d8ee9f0ae2cfa0c009930f7852c647ec901217c	-	ol9_x86_64_appstream
	grafana-selinux-10.2.6-23.el9_8.7.x86_64.rpm	c3cbfd786fa80d54be48c69f1f4ce7971667a9ed04e251226e016fe8c7fd47ce	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team