A vulnerability (CVE-2026-25679, CVSS 7.5 HIGH) in the Go `net/url` library, caused by incorrect parsing of IPv6 host literals, affects the grafana-pcp plugin for Red Hat Enterprise Linux 9. The underlying Go language versions affected are `go < 1.25.8` and `go version 1.26.0`, with the fix provided in Go version `1.25.8`. Red Hat has rated this update as Important and released patched packages for grafana-pcp on all supported RHEL 9 architectures.
Red Hat Product Errata RHSA-2026:19184 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:19184 - Security Advisory Overview Updated Packages Synopsis Important: grafana-pcp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for grafana-pcp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url CVEs CVE-2026-25679 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 x86_64 grafana-pcp-5.1.1-14.el9_8.x86_64.rpm SHA-256: ae0ece7b31e4bb9243c62c1a06fc8fbddf933fb7c6029f59724273139e47e423 grafana-pcp-debuginfo-5.1.1-14.el9_8.x86_64.rpm SHA-256: 7dc614dadec48f14b12acd7c37fe161f82f6492cfbbce97d3452e731cc804282 grafana-pcp-debugsource-5.1.1-14.el9_8.x86_64.rpm SHA-256: 01e939a9af11f47bc0e338750e11a10003a82562eccbfbb04ed6825da735417a Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 x86_64 grafana-pcp-5.1.1-14.el9_8.x86_64.rpm SHA-256: ae0ece7b31e4bb9243c62c1a06fc8fbddf933fb7c6029f59724273139e47e423 grafana-pcp-debuginfo-5.1.1-14.el9_8.x86_64.rpm SHA-256: 7dc614dadec48f14b12acd7c37fe161f82f6492cfbbce97d3452e731cc804282 grafana-pcp-debugsource-5.1.1-14.el9_8.x86_64.rpm SHA-256: 01e939a9af11f47bc0e338750e11a10003a82562eccbfbb04ed6825da735417a Red Hat Enterprise Linux for IBM z Systems 9 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 s390x grafana-pcp-5.1.1-14.el9_8.s390x.rpm SHA-256: f0c14755471cece439d5c47d1ba22993c6b0e0871d8355d7490a7c85137956c6 grafana-pcp-debuginfo-5.1.1-14.el9_8.s390x.rpm SHA-256: c55d4997f5d26eec28e8b843873f3ae28d628d5fbdaa01461facbb95a893f5d0 grafana-pcp-debugsource-5.1.1-14.el9_8.s390x.rpm SHA-256: 566c946654dbad26ae8ccc424bbac24caac97e4113c3021b0e5f18c8e242863b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 s390x grafana-pcp-5.1.1-14.el9_8.s390x.rpm SHA-256: f0c14755471cece439d5c47d1ba22993c6b0e0871d8355d7490a7c85137956c6 grafana-pcp-debuginfo-5.1.1-14.el9_8.s390x.rpm SHA-256: c55d4997f5d26eec28e8b843873f3ae28d628d5fbdaa01461facbb95a893f5d0 grafana-pcp-debugsource-5.1.1-14.el9_8.s390x.rpm SHA-256: 566c946654dbad26ae8ccc424bbac24caac97e4113c3021b0e5f18c8e242863b Red Hat Enterprise Linux for Power, little endian 9 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 ppc64le grafana-pcp-5.1.1-14.el9_8.ppc64le.rpm SHA-256: b39a1b9fab9445aafb841ebaa37484569cb7d8b22494df2e2be4401577d454a4 grafana-pcp-debuginfo-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 7c6178de33b7ef8320982505d55e162384aebbf438d5f5547ec25f2a1470b4e2 grafana-pcp-debugsource-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 458aa5f50be0f6e2abff46f115f726ae8cc928c4ffe7c69263b030ddc13a164e Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 ppc64le grafana-pcp-5.1.1-14.el9_8.ppc64le.rpm SHA-256: b39a1b9fab9445aafb841ebaa37484569cb7d8b22494df2e2be4401577d454a4 grafana-pcp-debuginfo-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 7c6178de33b7ef8320982505d55e162384aebbf438d5f5547ec25f2a1470b4e2 grafana-pcp-debugsource-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 458aa5f50be0f6e2abff46f115f726ae8cc928c4ffe7c69263b030ddc13a164e Red Hat Enterprise Linux for ARM 64 9 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 aarch64 grafana-pcp-5.1.1-14.el9_8.aarch64.rpm SHA-256: 84d06a65dc2a063f6cb3dd830ee13d30d64ddf539e1e8d1e054f2b6ad728f07b grafana-pcp-debuginfo-5.1.1-14.el9_8.aarch64.rpm SHA-256: 22e313238fe962d08c752cb32771772654730defbe350fcdb3f9b276a33ca00b grafana-pcp-debugsource-5.1.1-14.el9_8.aarch64.rpm SHA-256: 231e899135c1496bb384bf8a135de381a72c89fc1c263cb296ea769b288ee89e Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 aarch64 grafana-pcp-5.1.1-14.el9_8.aarch64.rpm SHA-256: 84d06a65dc2a063f6cb3dd830ee13d30d64ddf539e1e8d1e054f2b6ad728f07b grafana-pcp-debuginfo-5.1.1-14.el9_8.aarch64.rpm SHA-256: 22e313238fe962d08c752cb32771772654730defbe350fcdb3f9b276a33ca00b grafana-pcp-debugsource-5.1.1-14.el9_8.aarch64.rpm SHA-256: 231e899135c1496bb384bf8a135de381a72c89fc1c263cb296ea769b288ee89e Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 ppc64le grafana-pcp-5.1.1-14.el9_8.ppc64le.rpm SHA-256: b39a1b9fab9445aafb841ebaa37484569cb7d8b22494df2e2be4401577d454a4 grafana-pcp-debuginfo-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 7c6178de33b7ef8320982505d55e162384aebbf438d5f5547ec25f2a1470b4e2 grafana-pcp-debugsource-5.1.1-14.el9_8.ppc64le.rpm SHA-256: 458aa5f50be0f6e2abff46f115f726ae8cc928c4ffe7c69263b030ddc13a164e Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 x86_64 grafana-pcp-5.1.1-14.el9_8.x86_64.rpm SHA-256: ae0ece7b31e4bb9243c62c1a06fc8fbddf933fb7c6029f59724273139e47e423 grafana-pcp-debuginfo-5.1.1-14.el9_8.x86_64.rpm SHA-256: 7dc614dadec48f14b12acd7c37fe161f82f6492cfbbce97d3452e731cc804282 grafana-pcp-debugsource-5.1.1-14.el9_8.x86_64.rpm SHA-256: 01e939a9af11f47bc0e338750e11a10003a82562eccbfbb04ed6825da735417a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 aarch64 grafana-pcp-5.1.1-14.el9_8.aarch64.rpm SHA-256: 84d06a65dc2a063f6cb3dd830ee13d30d64ddf539e1e8d1e054f2b6ad728f07b grafana-pcp-debuginfo-5.1.1-14.el9_8.aarch64.rpm SHA-256: 22e313238fe962d08c752cb32771772654730defbe350fcdb3f9b276a33ca00b grafana-pcp-debugsource-5.1.1-14.el9_8.aarch64.rpm SHA-256: 231e899135c1496bb384bf8a135de381a72c89fc1c263cb296ea769b288ee89e Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 s390x grafana-pcp-5.1.1-14.el9_8.s390x.rpm SHA-256: f0c14755471cece439d5c47d1ba22993c6b0e0871d8355d7490a7c85137956c6 grafana-pcp-debuginfo-5.1.1-14.el9_8.s390x.rpm SHA-256: c55d4997f5d26eec28e8b843873f3ae28d628d5fbdaa01461facbb95a893f5d0 grafana-pcp-debugsource-5.1.1-14.el9_8.s390x.rpm SHA-256: 566c946654dbad26ae8ccc424bbac24caac97e4113c3021b0e5f18c8e242863b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7c08404e09c839da08d48716dc33a14eb22a249fc22f8 x86_64 grafana-pcp-5.1.1-14.el9_8.x86_64.rpm SHA-256: ae0ece7b31e4bb9243c62c1a06fc8fbddf933fb7c6029f59724273139e47e423 grafana-pcp-debuginfo-5.1.1-14.el9_8.x86_64.rpm SHA-256: 7dc614dadec48f14b12acd7c37fe161f82f6492cfbbce97d3452e731cc804282 grafana-pcp-debugsource-5.1.1-14.el9_8.x86_64.rpm SHA-256: 01e939a9af11f47bc0e338750e11a10003a82562eccbfbb04ed6825da735417a Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 SRPM grafana-pcp-5.1.1-14.el9_8.src.rpm SHA-256: 661928b8cc6f898c6ea7