Skip to content
OpenAdvisories
High ELSA-2026-99020 1 CVE

Important: grafana-pcp security update (Oracle Linux 8)

Published Nov 12, 2026 · Updated Nov 12, 2026

Ecosystem: Oracle Linux

Summary

[5.1.1-20]
- CVE-2026-116591 grafana-pcp: klauspost/compress: Denial of Service via crafted zstd compressed input
- Resolves RHEL-298346

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 grafana-pcp 0:5.1.1-20.el8_10

Vulnerabilities 1

  • High 8.7
    CVE-2026-116591

    compress zstd: Panic on two-block frames

    compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.…

    klauspost compress kubescape zarf Debian Ubuntu Azure Linux Alpine Wolfi Go