Summary
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input (CVE-2026-116591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debuginfo | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-2.el10_3.3 |
| Rocky Linux · 10 | grafana-pcp-debugsource | 0:6.1.0-2.el10_3.3 |
Vulnerabilities 1
-
High 8.7
compress zstd: Panic on two-block frames
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.…