grafana-10.2.6-23.el9_8
エラータID: AXSA:2026-1487:22
Release date:
Friday, August 7, 2026 - 18:44
Subject:
grafana-10.2.6-23.el9_8
Affected Channels:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-39821
Solution:
Update packages.
CVEs:
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
Additional Info:
N/A
Download:
SRPMS
- grafana-10.2.6-23.el9_8.src.rpm
MD5: 2580495f2f637a51424537bc6b23c122
SHA-256: 1a81b6c90ec12836c35317f4628e9783f7d4b8f898503a1cfbc9eb448f516513
Size: 336.14 MB
Asianux Server 9 for x86_64
- grafana-10.2.6-23.el9_8.x86_64.rpm
MD5: 1ad25c4986e770aecd63e1afe4b30897
SHA-256: d7e4fccb9fb825783ad51913c20e919737620f787c5140a61c0417b01d7962ea
Size: 113.87 MB - grafana-selinux-10.2.6-23.el9_8.x86_64.rpm
MD5: d034a6e6e045069082bf04c594b0919b
SHA-256: 5724b7282a9b86d7249986de9cb9f7ad4f785f09410c30cde2cb66b6f3674141
Size: 24.90 kB