grafana-pcp-5.1.1-17.el9_8
エラータID: AXSA:2026-1483:10
Release date:
Friday, August 7, 2026 - 16:09
Subject:
grafana-pcp-5.1.1-17.el9_8
Affected Channels:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-39821
Solution:
Update packages.
CVEs:
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
Additional Info:
N/A
Download:
SRPMS
- grafana-pcp-5.1.1-17.el9_8.src.rpm
MD5: 7de112468855fb64ac7710f58f784ab8
SHA-256: b299b3f24bc4dcce53930536bbe0303f02986a6929f2a0ca414703df9e418242
Size: 60.06 MB
Asianux Server 9 for x86_64
- grafana-pcp-5.1.1-17.el9_8.x86_64.rpm
MD5: 9c948838e8541f1bd62133798ada262d
SHA-256: 47020fdbbca74176dd3b723f8b9ad6b80c18a3b3e1999bb997d7bb906a6ce4e9
Size: 10.86 MB