RHSA-2026:97555: Important: grafana security, bug fix, and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) Bug Fix(es) and Enhancement(s): [grafana / rhel-9.9] Remove Lua ExclusiveArch macro for Konflux build (JIRA:RHEL-188281) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/grafanato a version that resolves this vulnerability.Fixed in 10.2.6-23.el9 - Upgrade
Upgrade
redhat/grafana-debuginfoto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9 - Upgrade
Upgrade
redhat/grafana-debugsourceto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9 - Upgrade
Upgrade
redhat/grafana-selinuxto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9 - Upgrade
Upgrade
redhat/grafanato a version that resolves this vulnerability.Fixed in 10.2.6-23.el9.aa - Upgrade
Upgrade
redhat/grafana-debuginfoto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9.aa - Upgrade
Upgrade
redhat/grafana-debugsourceto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9.aa - Upgrade
Upgrade
redhat/grafana-selinuxto a version that resolves this vulnerability.Fixed in 10.2.6-23.el9.aa