p PatchFirst

ALSA-2026:88188

ALSA-2026:88188 · Important: grafana security update

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Corrección disponible

Publicación
Actualización

Pila tecnológica: system · applications

Productos y versiones afectados

  • grafana AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 9.2.10-36.el8_10

    Actualiza a 9.2.10-36.el8_10

  • grafana-selinux AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 9.2.10-36.el8_10

    Actualiza a 9.2.10-36.el8_10

Fuentes originales

Comprueba tu servidor →