High ELSA-2026-7011 1 CVE

Important: grafana security update (Oracle Linux 8)

Published Apr 9, 2026 · Updated Apr 9, 2026

Ecosystem: Oracle Linux

Summary

[9.2.10-29.0.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-29]
- Resolves RHEL-156639: CVE-2026-25679

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	grafana	0:9.2.10-29.0.1.el8_10
Oracle Linux · 8	grafana-selinux	0:9.2.10-29.0.1.el8_10

Vulnerabilities 1

High 7.5

CVE-2026-25679

Incorrect parsing of IPv6 host literals in net/url

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Go standard library net/url langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go

Mar 6, 2026