Summary
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
Bug Fix(es) and Enhancement(s):
* Update to new grafana-pcp release (JIRA:Rocky Linux-169811)
* [grafana-pcp / rhel-10.3] Remove Lua ExclusiveArch macro for Konflux build (JIRA:Rocky Linux-188288)
* Rebase to grafana-pcp v6.1.0 (JIRA:Rocky Linux-243641)
* grafana-pcp: return a clear error when geomap queries lack latitude/longitude labels (JIRA:Rocky Linux-182453)
* [RFE] Add grafana-pcp dashboards for Rocky Linux AI (JIRA:Rocky Linux-58940)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-1.el10 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-1.el10 |
Vulnerabilities 2
-
High 7.5
Unexpected work during chain building in crypto/x509
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 an…
-
High 7.5
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issu…