Release date:
2026-10-09 13:39:50 UTC
Description:
- CVE-2026-21720: bound the avatar cache to 2000 entries so a signed-in user
cannot grow it without limit
- CVE-2026-28383: carry the upstream test for the oversized plugin resource
request body
Updated packages:
-
grafana-10.2.6-23.el9_8.3.tuxcare.els5.aarch64.rpm
sha:556ee8df46cb2fdca231401b55fcf959db04c7e13db61085325c3830a26eb8da
-
grafana-10.2.6-23.el9_8.3.tuxcare.els5.x86_64.rpm
sha:39e86a557aaa9ab1004ce83a6b8e3f68c192392cd7ba0dc80f9fbe1d48209fe9
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els5.aarch64.rpm
sha:df218bca081675ef2c53b04b37e31a2c79b5c77366983da9c099a388da23b096
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els5.x86_64.rpm
sha:74eb75ba6428ec6acbd229e24b7b91f7f0f8985ef3d6d287c9d079b909890f6e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
