Red Hat Product Errata RHSA-2026:19027 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:19027 - Security Advisory Overview Updated Packages Synopsis Important: grafana security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for grafana is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url CVEs CVE-2026-25679 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 x86_64 grafana-10.2.6-25.el10_2.x86_64.rpm SHA-256: 919173b153e89f9f5cc6349c432b83af70e9b0af3902d16a40ca6bf41682ad80 grafana-debuginfo-10.2.6-25.el10_2.x86_64.rpm SHA-256: 978ed3fd2d28250ffb5c8acafe1c0f54f67f4076de3f492fcee32300f6a3381f grafana-debugsource-10.2.6-25.el10_2.x86_64.rpm SHA-256: a573b116cc9579d06f762c704e7224bb89e2466fd0b2fbda22735f1f7b044d49 grafana-selinux-10.2.6-25.el10_2.x86_64.rpm SHA-256: fea4658cda202734651b4656f6f03c9fcc0807237d1923249acaf8a2a0f8da4b Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 x86_64 grafana-10.2.6-25.el10_2.x86_64.rpm SHA-256: 919173b153e89f9f5cc6349c432b83af70e9b0af3902d16a40ca6bf41682ad80 grafana-debuginfo-10.2.6-25.el10_2.x86_64.rpm SHA-256: 978ed3fd2d28250ffb5c8acafe1c0f54f67f4076de3f492fcee32300f6a3381f grafana-debugsource-10.2.6-25.el10_2.x86_64.rpm SHA-256: a573b116cc9579d06f762c704e7224bb89e2466fd0b2fbda22735f1f7b044d49 grafana-selinux-10.2.6-25.el10_2.x86_64.rpm SHA-256: fea4658cda202734651b4656f6f03c9fcc0807237d1923249acaf8a2a0f8da4b Red Hat Enterprise Linux for IBM z Systems 10 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 s390x grafana-10.2.6-25.el10_2.s390x.rpm SHA-256: 8314927d65c0fb6ac55607abd9d00c75d45646e6054e40398aa3f70d04125ba6 grafana-debuginfo-10.2.6-25.el10_2.s390x.rpm SHA-256: bdc09a2dc53e5f4e90ede1f2ef80cfbf80624948ebc835750ff6f5b4f9b6869f grafana-debugsource-10.2.6-25.el10_2.s390x.rpm SHA-256: 17f0a1970777f5acb53659966c466cff9483b7c87454a6e28e5b697d1ceb39a2 grafana-selinux-10.2.6-25.el10_2.s390x.rpm SHA-256: 6fd48e6bb5c3c2ab17d03635c74e1cff4afe9210795cc0136371a0d54ffd033d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 s390x grafana-10.2.6-25.el10_2.s390x.rpm SHA-256: 8314927d65c0fb6ac55607abd9d00c75d45646e6054e40398aa3f70d04125ba6 grafana-debuginfo-10.2.6-25.el10_2.s390x.rpm SHA-256: bdc09a2dc53e5f4e90ede1f2ef80cfbf80624948ebc835750ff6f5b4f9b6869f grafana-debugsource-10.2.6-25.el10_2.s390x.rpm SHA-256: 17f0a1970777f5acb53659966c466cff9483b7c87454a6e28e5b697d1ceb39a2 grafana-selinux-10.2.6-25.el10_2.s390x.rpm SHA-256: 6fd48e6bb5c3c2ab17d03635c74e1cff4afe9210795cc0136371a0d54ffd033d Red Hat Enterprise Linux for Power, little endian 10 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 ppc64le grafana-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 79c9504f536b378bebc43f57deb024bcf9112be363edde74d5616ca9314868b5 grafana-debuginfo-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 9a81f6b5144d80f7fe8c7559907eea1541c09c0ffa39a33dc8833f553bc4e6e8 grafana-debugsource-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 92e06e0c49fdafb5a1d08d22eec52399baa809070292fdfb463875474756d186 grafana-selinux-10.2.6-25.el10_2.ppc64le.rpm SHA-256: daf318755e0a5284a7ed23c1632f44e15ec480103e50ef2cdec8ee4c5c5b9765 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 ppc64le grafana-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 79c9504f536b378bebc43f57deb024bcf9112be363edde74d5616ca9314868b5 grafana-debuginfo-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 9a81f6b5144d80f7fe8c7559907eea1541c09c0ffa39a33dc8833f553bc4e6e8 grafana-debugsource-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 92e06e0c49fdafb5a1d08d22eec52399baa809070292fdfb463875474756d186 grafana-selinux-10.2.6-25.el10_2.ppc64le.rpm SHA-256: daf318755e0a5284a7ed23c1632f44e15ec480103e50ef2cdec8ee4c5c5b9765 Red Hat Enterprise Linux for ARM 64 10 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 aarch64 grafana-10.2.6-25.el10_2.aarch64.rpm SHA-256: ec8d275e45f91b30c49933bac0efa5d41ff0fcfb3665d244a7d3808826100e58 grafana-debuginfo-10.2.6-25.el10_2.aarch64.rpm SHA-256: d8ca16204b5f7eb3fa778625d9cf1cc7c73a1d8bf037937717fa7371ccaba12a grafana-debugsource-10.2.6-25.el10_2.aarch64.rpm SHA-256: 81efb9a875d25e39d27e8af96ae6f0d3d5d1a5b6b1317aeffcc1b204580dcebb grafana-selinux-10.2.6-25.el10_2.aarch64.rpm SHA-256: 226fb6c64f1a6b16f66d355659163b179fead8a7326084e2442635c641264091 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 aarch64 grafana-10.2.6-25.el10_2.aarch64.rpm SHA-256: ec8d275e45f91b30c49933bac0efa5d41ff0fcfb3665d244a7d3808826100e58 grafana-debuginfo-10.2.6-25.el10_2.aarch64.rpm SHA-256: d8ca16204b5f7eb3fa778625d9cf1cc7c73a1d8bf037937717fa7371ccaba12a grafana-debugsource-10.2.6-25.el10_2.aarch64.rpm SHA-256: 81efb9a875d25e39d27e8af96ae6f0d3d5d1a5b6b1317aeffcc1b204580dcebb grafana-selinux-10.2.6-25.el10_2.aarch64.rpm SHA-256: 226fb6c64f1a6b16f66d355659163b179fead8a7326084e2442635c641264091 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 aarch64 grafana-10.2.6-25.el10_2.aarch64.rpm SHA-256: ec8d275e45f91b30c49933bac0efa5d41ff0fcfb3665d244a7d3808826100e58 grafana-debuginfo-10.2.6-25.el10_2.aarch64.rpm SHA-256: d8ca16204b5f7eb3fa778625d9cf1cc7c73a1d8bf037937717fa7371ccaba12a grafana-debugsource-10.2.6-25.el10_2.aarch64.rpm SHA-256: 81efb9a875d25e39d27e8af96ae6f0d3d5d1a5b6b1317aeffcc1b204580dcebb grafana-selinux-10.2.6-25.el10_2.aarch64.rpm SHA-256: 226fb6c64f1a6b16f66d355659163b179fead8a7326084e2442635c641264091 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 s390x grafana-10.2.6-25.el10_2.s390x.rpm SHA-256: 8314927d65c0fb6ac55607abd9d00c75d45646e6054e40398aa3f70d04125ba6 grafana-debuginfo-10.2.6-25.el10_2.s390x.rpm SHA-256: bdc09a2dc53e5f4e90ede1f2ef80cfbf80624948ebc835750ff6f5b4f9b6869f grafana-debugsource-10.2.6-25.el10_2.s390x.rpm SHA-256: 17f0a1970777f5acb53659966c466cff9483b7c87454a6e28e5b697d1ceb39a2 grafana-selinux-10.2.6-25.el10_2.s390x.rpm SHA-256: 6fd48e6bb5c3c2ab17d03635c74e1cff4afe9210795cc0136371a0d54ffd033d Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238bebb04cc74186779397273972356e9f8726965c8760d2e205415 ppc64le grafana-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 79c9504f536b378bebc43f57deb024bcf9112be363edde74d5616ca9314868b5 grafana-debuginfo-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 9a81f6b5144d80f7fe8c7559907eea1541c09c0ffa39a33dc8833f553bc4e6e8 grafana-debugsource-10.2.6-25.el10_2.ppc64le.rpm SHA-256: 92e06e0c49fdafb5a1d08d22eec52399baa809070292fdfb463875474756d186 grafana-selinux-10.2.6-25.el10_2.ppc64le.rpm SHA-256: daf318755e0a5284a7ed23c1632f44e15ec480103e50ef2cdec8ee4c5c5b9765 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM grafana-10.2.6-25.el10_2.src.rpm SHA-256: 71ae2c2d1238b