RHSA-2026:2914

csafDEsuse_csaf

security update for grafana

view advisory published 2026-02-18

security update for grafana

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-68121UScritical10.0—
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed h…
CVE-2025-61728US——
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a ma…
CVE-2025-61726US——
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum reques…
CVE-2026-21721US—OT elevatedExploit
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management righ…
CVE-2025-61729US——
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • Fixedgrafana-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-selinux-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-selinux-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-selinux-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-selinux-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgrafana-selinux-0:10.2.6-22.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan