[CLSA-2026:1792757203] grafana: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 12:07:03 UTC
Description:
- CVE-2026-33382: cap JSON bodies read by web.Bind at 100 MiB and pre-auth login, signup, password reset and invite bodies at 100 KiB
CVEs fixed:
Updated packages:
  • grafana-9.0.9-4.el9_2.alma.1.tuxcare.els25.aarch64.rpm
    sha:628133b6ee090f614ec2df2039baee9576d155ca905b8c9251e6937280aeb522
  • grafana-9.0.9-4.el9_2.alma.1.tuxcare.els25.x86_64.rpm
    sha:3fa7ab97cf592568cc87275a465266952b3ae930948f44c8c5dad2e87b4a8a3a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.