ELSA-2026-62407-0

ELSA-2026-62407-0 - grafana security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-02

Description

[9.2.10-33.0.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-33]
- Rebuild against updated golang
- Resolves RHEL-251835
- Resolves RHEL-251696
- Resolves RHEL-242383
- Resolves RHEL-242344
- Resolves RHEL-242224
- Resolves RHEL-242108
- Resolves RHEL-242028
- Resolves RHEL-241669

[9.2.10-32.1]
- Resolves RHEL-219393: CVE-2026-42127
- Resolves RHEL-211017: CVE-2026-33377

Related CVEs

CVE-2026-33818

CVE-2026-39820

CVE-2026-42499

CVE-2026-56853

CVE-2026-56858

CVE-2026-56859

CVE-2026-56860

CVE-2026-56862

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	grafana-9.2.10-33.0.1.el8_10.src.rpm	a322a8efdcf5282b31e7bbee753d27167bd70231755a7000347efde8a7d797b4	-	ol8_aarch64_appstream
	grafana-9.2.10-33.0.1.el8_10.aarch64.rpm	313f096986ca8d699f0b0b58593d7c34067379f2a15b35e401f19de195697962	-	ol8_aarch64_appstream
	grafana-selinux-9.2.10-33.0.1.el8_10.aarch64.rpm	aac23a7a5dd77e84b0526e5e5793b77628ed16eaf95f4784dc8dd1d01b4424e9	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	grafana-9.2.10-33.0.1.el8_10.src.rpm	a322a8efdcf5282b31e7bbee753d27167bd70231755a7000347efde8a7d797b4	-	ol8_x86_64_appstream
	grafana-9.2.10-33.0.1.el8_10.x86_64.rpm	4cb11ead156ebfdfc4829bfcee2a01aab8aa5339ab4b450c9d862b1e8103a8da	-	ol8_x86_64_appstream
	grafana-selinux-9.2.10-33.0.1.el8_10.x86_64.rpm	aea16cbb2f7212aebcb7fdedbef85ae2a70a1af91e386cc684d9b49315b74d3e	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team