Summary
[10.2.6-19]
- Resolves RHEL-158728: CVE-2026-25679
[10.2.6-17]
- Resolves RHEL-144959: CVE-2026-21721
- Resolves RHEL-146863: CVE-2025-61726
- Resolves RHEL-147081: CVE-2025-61729
- Resolves RHEL-147370: CVE-2025-61728
- Resolves RHEL-149621: CVE-2025-68121
[10.2.6-17]
- Resolves RHEL-125692: CVE-2025-58183
- Resolves RHEL-120426: Grafana-selinux prevents plugins from searching cgroups
[10.2.6-15]
- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections
[10.2.6-13]
- Resolves RHEL-89953: CVE-2025-4123
[10.2.6-12]
- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana
[10.2.6-11]
- Resolves RHEL-84636: CVE-2025-30204
[10.2.6-10]
- Resolves RHEL-75919: grafana selinux issue with autofs_t
[10.2.6-9]
- Resolves RHEL-69939: allow mssql datasource in selinux policy
[10.2.6-8]
- Resolves RHEL-62312: CVE-2024-47875
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | grafana | 0:10.2.6-19.el9_7 |
| Oracle Linux · 9 | grafana-selinux | 0:10.2.6-19.el9_7 |
Vulnerabilities 1
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.