ELSA-2026-19352

Опубликовано: 23 июн. 2026

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2026-19352: grafana security update (IMPORTANT)

[10.2.6-22]

Resolves RHEL-161803: CVE-2026-27877
Resolves RHEL-166678: CVE-2026-32282
Resolves RHEL-167678: CVE-2026-32283

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

grafana

10.2.6-22.el9_8

grafana-selinux

10.2.6-22.el9_8

Oracle Linux x86_64

grafana

10.2.6-22.el9_8

grafana-selinux

10.2.6-22.el9_8

Связанные CVE

CVE-2026-27877

CVE-2026-32282

CVE-2026-32283

Ссылки на источники

Связанные уязвимости

RLSA-2026:19352

rocky

3 месяца назад

Important: grafana security update

RLSA-2026:19134

rocky

3 месяца назад

Important: grafana security update

ELSA-2026-19134

oracle-oval

27 дней назад

ELSA-2026-19134: grafana security update (IMPORTANT)

CVE-2026-27877

CVSS3: 6.5

ubuntu

5 месяцев назад

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.

CVE-2026-27877

CVSS3: 7.5

redhat

5 месяцев назад