ELSA-2026-99030

ELSA-2026-99030 - grafana security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-12

Description

[9.2.10-38.0.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-38]
- CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting
- Resolves RHEL-291857

[9.2.10-37]
- CVE-2026-116591 grafana: klauspost/compress: Denial of Service via crafted zstd compressed input
- Resolves RHEL-298352

Related CVEs

CVE-2026-116591

CVE-2026-17183

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	grafana-9.2.10-38.0.1.el8_10.src.rpm	e4f3b1f7527675de4c991f6213a69a89ee07f3e35e06f94279f950d90c8dbd96	-	ol8_aarch64_appstream
	grafana-9.2.10-38.0.1.el8_10.aarch64.rpm	11752b9001616ec642d067360482d0435ab8fe5fbdcf3c6214c3d5953962613a	-	ol8_aarch64_appstream
	grafana-selinux-9.2.10-38.0.1.el8_10.aarch64.rpm	b3993498c923b76ba563f8b8c4f8243c5a66d965399483a3e7c238ba766b1b08	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	grafana-9.2.10-38.0.1.el8_10.src.rpm	e4f3b1f7527675de4c991f6213a69a89ee07f3e35e06f94279f950d90c8dbd96	-	ol8_x86_64_appstream
	grafana-9.2.10-38.0.1.el8_10.x86_64.rpm	a4a9ea7d361367164ccfe34627319d2c6a1847aba7f00be7746e24315ef2a05b	-	ol8_x86_64_appstream
	grafana-selinux-9.2.10-38.0.1.el8_10.x86_64.rpm	934df050399556a38933b970e3f5f05f031d42332a77131cc9c141ed8464c398	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team