Skip to content
OpenAdvisories
Medium RHSA-2026:46391 1 CVE

Red Hat Security Advisory: grafana security, bug fix, and enhancement update

Published Jul 28, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana 0:9.2.10-32.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana-debuginfo 0:9.2.10-32.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana-debugsource 0:9.2.10-32.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream grafana-selinux 0:9.2.10-32.el8_10

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-44740

    go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

    Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumptio…

    go-git go-billy scorecard kyverno-cli-1.17 Debian Ubuntu Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2483894
  • article
    https://issues.redhat.com/browse/RHEL-188279
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46391.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-44740
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44740
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44740
  • article
    https://github.com/go-git/go-billy/releases/tag/v5.9.0
  • article
    https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1
  • article
    https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6