Red Hat Product Errata RHSA-2026:54184 - Security Advisory
Issued:
2026-08-12
Updated:
2026-08-12

RHSA-2026:54184 - Security Advisory

Synopsis

Important: grafana security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for grafana is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads (CVE-2026-42127)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
x86_64
grafana-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: d3f2ceca50a67c8efe3d946c487967b86955e82567fc4096faa4fdf753482c48
grafana-debuginfo-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: ce0686bf3e03e6c9136ea2014d7ef1bb56e1ea2042ea9af99b2fb8fa84921259
grafana-debugsource-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 2f567cbce0870e06de8bee628156baa0ec15d1cfd068f7137528e6bf88196bd0
grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 42e538063b24dd1527c959bd00e069d2094458d280a0c278f8e533b1d8151b50

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
x86_64
grafana-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: d3f2ceca50a67c8efe3d946c487967b86955e82567fc4096faa4fdf753482c48
grafana-debuginfo-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: ce0686bf3e03e6c9136ea2014d7ef1bb56e1ea2042ea9af99b2fb8fa84921259
grafana-debugsource-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 2f567cbce0870e06de8bee628156baa0ec15d1cfd068f7137528e6bf88196bd0
grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 42e538063b24dd1527c959bd00e069d2094458d280a0c278f8e533b1d8151b50

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
s390x
grafana-10.2.6-23.el9_8.1.s390x.rpm SHA-256: e6c1c381fd766ce5ca92b8a169baf257c4d6f41aa54941a49e14c0ac97a13e72
grafana-debuginfo-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 2314097afd75b3b355f55f7141fb24e5c68a968f0a9da750a47f6cac42acf36a
grafana-debugsource-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 94f2eaef1efaf077326b0fbd77fa5839b192a5fd8e65686b86164b3ad3711832
grafana-selinux-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 05fdfba02191250fa07723f51f66c2afffc2373f89b30a99769700fdc2aca3e2

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
s390x
grafana-10.2.6-23.el9_8.1.s390x.rpm SHA-256: e6c1c381fd766ce5ca92b8a169baf257c4d6f41aa54941a49e14c0ac97a13e72
grafana-debuginfo-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 2314097afd75b3b355f55f7141fb24e5c68a968f0a9da750a47f6cac42acf36a
grafana-debugsource-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 94f2eaef1efaf077326b0fbd77fa5839b192a5fd8e65686b86164b3ad3711832
grafana-selinux-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 05fdfba02191250fa07723f51f66c2afffc2373f89b30a99769700fdc2aca3e2

Red Hat Enterprise Linux for Power, little endian 9

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
ppc64le
grafana-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: 1c0979acaf38674e7fbe24f89d9fa6fbd55c1704506459bc2b2adcce7d969229
grafana-debuginfo-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: ea8235fa449440525e0677784b63bec124fcad53678078420f16031b190fe587
grafana-debugsource-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: c9ef93292708a830a9b9c79173596cee3d5cc569ff11471dc662f5f02b0c7e5b
grafana-selinux-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: f0858eb7a3655cd7a5b1749ebf660f58f6338dd3888fbc9b22b77d7de0c7abed

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
ppc64le
grafana-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: 1c0979acaf38674e7fbe24f89d9fa6fbd55c1704506459bc2b2adcce7d969229
grafana-debuginfo-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: ea8235fa449440525e0677784b63bec124fcad53678078420f16031b190fe587
grafana-debugsource-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: c9ef93292708a830a9b9c79173596cee3d5cc569ff11471dc662f5f02b0c7e5b
grafana-selinux-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: f0858eb7a3655cd7a5b1749ebf660f58f6338dd3888fbc9b22b77d7de0c7abed

Red Hat Enterprise Linux for ARM 64 9

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
aarch64
grafana-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: ca5219b16ac4c4a79a163934ff722f81098abaa507c1de4b65d46ffde7f9e09f
grafana-debuginfo-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 7c4fbd92bdb5d3898f75bfb7e234dcbab18f6a8a78227c836bfeced5f8ca539e
grafana-debugsource-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 9d4d5b1f2c1bb27e28243960fb2a2d942cad5c454edaff96082760951561339c
grafana-selinux-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: a4ef2af583e991ab4f2edc15f5108a6f12565285d4ec867617b53b27a77e0620

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
aarch64
grafana-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: ca5219b16ac4c4a79a163934ff722f81098abaa507c1de4b65d46ffde7f9e09f
grafana-debuginfo-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 7c4fbd92bdb5d3898f75bfb7e234dcbab18f6a8a78227c836bfeced5f8ca539e
grafana-debugsource-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 9d4d5b1f2c1bb27e28243960fb2a2d942cad5c454edaff96082760951561339c
grafana-selinux-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: a4ef2af583e991ab4f2edc15f5108a6f12565285d4ec867617b53b27a77e0620

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
ppc64le
grafana-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: 1c0979acaf38674e7fbe24f89d9fa6fbd55c1704506459bc2b2adcce7d969229
grafana-debuginfo-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: ea8235fa449440525e0677784b63bec124fcad53678078420f16031b190fe587
grafana-debugsource-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: c9ef93292708a830a9b9c79173596cee3d5cc569ff11471dc662f5f02b0c7e5b
grafana-selinux-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: f0858eb7a3655cd7a5b1749ebf660f58f6338dd3888fbc9b22b77d7de0c7abed

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
x86_64
grafana-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: d3f2ceca50a67c8efe3d946c487967b86955e82567fc4096faa4fdf753482c48
grafana-debuginfo-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: ce0686bf3e03e6c9136ea2014d7ef1bb56e1ea2042ea9af99b2fb8fa84921259
grafana-debugsource-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 2f567cbce0870e06de8bee628156baa0ec15d1cfd068f7137528e6bf88196bd0
grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 42e538063b24dd1527c959bd00e069d2094458d280a0c278f8e533b1d8151b50

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
aarch64
grafana-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: ca5219b16ac4c4a79a163934ff722f81098abaa507c1de4b65d46ffde7f9e09f
grafana-debuginfo-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 7c4fbd92bdb5d3898f75bfb7e234dcbab18f6a8a78227c836bfeced5f8ca539e
grafana-debugsource-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 9d4d5b1f2c1bb27e28243960fb2a2d942cad5c454edaff96082760951561339c
grafana-selinux-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: a4ef2af583e991ab4f2edc15f5108a6f12565285d4ec867617b53b27a77e0620

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
s390x
grafana-10.2.6-23.el9_8.1.s390x.rpm SHA-256: e6c1c381fd766ce5ca92b8a169baf257c4d6f41aa54941a49e14c0ac97a13e72
grafana-debuginfo-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 2314097afd75b3b355f55f7141fb24e5c68a968f0a9da750a47f6cac42acf36a
grafana-debugsource-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 94f2eaef1efaf077326b0fbd77fa5839b192a5fd8e65686b86164b3ad3711832
grafana-selinux-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 05fdfba02191250fa07723f51f66c2afffc2373f89b30a99769700fdc2aca3e2

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
x86_64
grafana-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: d3f2ceca50a67c8efe3d946c487967b86955e82567fc4096faa4fdf753482c48
grafana-debuginfo-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: ce0686bf3e03e6c9136ea2014d7ef1bb56e1ea2042ea9af99b2fb8fa84921259
grafana-debugsource-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 2f567cbce0870e06de8bee628156baa0ec15d1cfd068f7137528e6bf88196bd0
grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm SHA-256: 42e538063b24dd1527c959bd00e069d2094458d280a0c278f8e533b1d8151b50

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
aarch64
grafana-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: ca5219b16ac4c4a79a163934ff722f81098abaa507c1de4b65d46ffde7f9e09f
grafana-debuginfo-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 7c4fbd92bdb5d3898f75bfb7e234dcbab18f6a8a78227c836bfeced5f8ca539e
grafana-debugsource-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: 9d4d5b1f2c1bb27e28243960fb2a2d942cad5c454edaff96082760951561339c
grafana-selinux-10.2.6-23.el9_8.1.aarch64.rpm SHA-256: a4ef2af583e991ab4f2edc15f5108a6f12565285d4ec867617b53b27a77e0620

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
ppc64le
grafana-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: 1c0979acaf38674e7fbe24f89d9fa6fbd55c1704506459bc2b2adcce7d969229
grafana-debuginfo-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: ea8235fa449440525e0677784b63bec124fcad53678078420f16031b190fe587
grafana-debugsource-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: c9ef93292708a830a9b9c79173596cee3d5cc569ff11471dc662f5f02b0c7e5b
grafana-selinux-10.2.6-23.el9_8.1.ppc64le.rpm SHA-256: f0858eb7a3655cd7a5b1749ebf660f58f6338dd3888fbc9b22b77d7de0c7abed

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
grafana-10.2.6-23.el9_8.1.src.rpm SHA-256: 0dae9dcb987f6e7a0c2acba8b49f474dc1493ceda433e914cdcd56ed47a0bd55
s390x
grafana-10.2.6-23.el9_8.1.s390x.rpm SHA-256: e6c1c381fd766ce5ca92b8a169baf257c4d6f41aa54941a49e14c0ac97a13e72
grafana-debuginfo-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 2314097afd75b3b355f55f7141fb24e5c68a968f0a9da750a47f6cac42acf36a
grafana-debugsource-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 94f2eaef1efaf077326b0fbd77fa5839b192a5fd8e65686b86164b3ad3711832
grafana-selinux-10.2.6-23.el9_8.1.s390x.rpm SHA-256: 05fdfba02191250fa07723f51f66c2afffc2373f89b30a99769700fdc2aca3e2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.