Release date:
2026-09-22 12:36:15 UTC
Description:
- CVE-2026-21727: drop the org_id = 0 backward-compatibility condition from the
correlations read and delete paths so legacy correlation records created before
Grafana 10.2 can no longer be read or deleted across organizations
Updated packages:
-
grafana-10.2.6-15.el9_6.tuxcare.els17.x86_64.rpm
sha:9ac7125e0421e6ff167254a1ba43d8448ded670e29cf3f03e6d1ee3150fba3ac
-
grafana-selinux-10.2.6-15.el9_6.tuxcare.els17.x86_64.rpm
sha:db2151f492803bc5f3664319cb5fb12bda8747f804fc27177173b8709a4c7e59
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.