ELSA-2026-83544

ELSA-2026-83544 - grafana security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-15

Description

[9.2.10-35.0.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-35]
- CVE-2026-15815 grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION
- Resolves RHEL-253157

[9.2.10-34]
- CVE-2026-42504 grafana: Golang MIME: Denial of Service via maliciously-crafted MIME header [rhel-9.8.z]
- Resolves RHEL-266517

Related CVEs

CVE-2026-15815

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	grafana-9.2.10-35.0.1.el8_10.src.rpm	46de13bcc053596512b81f3218d2e47c1a9b3d5e35c320f153d24262812570bf	-	ol8_aarch64_appstream
	grafana-9.2.10-35.0.1.el8_10.aarch64.rpm	e3d8941bb2327a7e5b1de71b58aa8bf06a21df09efc736bdb2586865d3895b74	-	ol8_aarch64_appstream
	grafana-selinux-9.2.10-35.0.1.el8_10.aarch64.rpm	16210b1d6049e9226448e0f66edb38f50227857e9ce1246be4fda8fa445a8792	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	grafana-9.2.10-35.0.1.el8_10.src.rpm	46de13bcc053596512b81f3218d2e47c1a9b3d5e35c320f153d24262812570bf	-	ol8_x86_64_appstream
	grafana-9.2.10-35.0.1.el8_10.x86_64.rpm	ecde99dd143ac530c094f588b7c48715cd89b925546671ad4e9313d30642fb09	-	ol8_x86_64_appstream
	grafana-selinux-9.2.10-35.0.1.el8_10.x86_64.rpm	640b2c631bf563c414ea304ca5fc60e7ebc99527a6f31e343bfb107dca48dee2	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team