ELSA-2026-89732

ELSA-2026-89732 - grafana security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-26

Description

[10.2.6-28.9]
- Rebuild against updated golang
- Resolves RHEL-290737

[10.2.6-28.9]
- CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting
in Unified Alerting
- Resolves RHEL-290765

[10.2.6-28.8]
- Rebuild against updated golang
- Resolves RHEL-287475
- Resolves RHEL-279352
- Resolves RHEL-278978
- Resolves RHEL-278696

[10.2.6-28.7]
- Resolves RHEL-253142: CVE-2026-15815

[10.2.6-28.6]
- Resolves RHEL-261888: CVE-2026-84445

Related CVEs

CVE-2026-17183

CVE-2026-94440

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	grafana-10.2.6-28.el10_2.9.src.rpm	7403e0079c5d8632a3d1d217c4e8c6f45d1f3a89d213f060dfb6529bbcec8377	-	ol10_aarch64_appstream
	grafana-10.2.6-28.el10_2.9.aarch64.rpm	b311703295f436c768d7a2bab8f93de3798582e275771c039ac2ce89f7e346c1	-	ol10_aarch64_appstream
	grafana-selinux-10.2.6-28.el10_2.9.aarch64.rpm	db58f4f6ba1566b25e8cfbc264473d14b6d5ba1b4a40f515a2a399235c033206	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	grafana-10.2.6-28.el10_2.9.src.rpm	7403e0079c5d8632a3d1d217c4e8c6f45d1f3a89d213f060dfb6529bbcec8377	-	ol10_x86_64_appstream
	grafana-10.2.6-28.el10_2.9.x86_64.rpm	686b42d9f66c54ad5f63da2360fce039ca161c5efe6ffb8f667f07bd49f15ebe	-	ol10_x86_64_appstream
	grafana-selinux-10.2.6-28.el10_2.9.x86_64.rpm	7a379ce47e93b22b8485f61ee02b015dac56f7308eb1280b1384b904b16fb14f	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team