This update for grafana fixes the following issues:
Changes in grafana:
- Update to version 11.6.11:
Features and enhancements:
* Alerting: Add limits for the size of expanded notification
templates
* Correlations: Remove support for org_id=0
Security:
* CVE-2026-21722: Public dashboards annotations: use dashboard
timerange if time selection disabled (bsc#1258136)
- Update to version 11.6.10:
Features and enhancements:
* API: Add missing scope check on dashboards
* Avatar: Require sign-in, remove queue, respect timeout
Bug fixes:
* Alerting: Fix a race condition panic in ResetStateByRuleUID
- Update to version 11.6.9:
Features and enhancements:
* Plugins: Add PluginContext to plugins when scenes is disabled
Bug fixes:
* Alerting: Fix contacts point issues
- Update to version 11.6.8:
Bug fixes:
* Alerting: Fix unmarshalling of GettableStatus to include time
intervals
- Update to version 11.6.7:
Bug fixes:
* Auth: Fix render user...
Read the Full Advisory- openSUSE Leap 16.0:
grafana-11.6.11-bp160.1.1
* bsc#1231844
* bsc#1232975
* bsc#1233343
* bsc#1235206
* bsc#1235574
* bsc#1236510
* bsc#1236559
* bsc#1236734
* bsc#1237671
* bsc#1238703
* bsc#1241683
* bsc#1241687
* bsc#1241809
* bsc#1243672
* bsc#1243714
* bsc#1245302
* bsc#1246735
* bsc#1246736
* bsc#1250616
* bsc#1251454
* bsc#1251657
* bsc#1254113
* bsc#1255340
* bsc#1257337
* bsc#1257349
* bsc#1258136
References:
* https://www.suse.com/security/cve/CVE-2023-45288.html
* https://www.suse.com/security/cve/CVE-2024-11741.html
* https://www.suse.com/security/cve/CVE-2024-28180.html
* https://www.suse.com/security/cve/CVE-2024-45339.html
* https://www.suse.com/security/cve/CVE-2024-51744.html
* https://www.suse.com/security/cve/CVE-2024-9264.html
* https://www.suse.com/security/cve/CVE-2024-9476.html
* https://www.suse.com/security/cve/CVE-2025-11065.html
* https://www.suse.com/security/cve/CVE-2025-21613.html
* https://www.suse.com/security/cve/CVE-2025-22870.html
* https://www.suse.com/security/cve/CVE-2025-22872.html
*...
Read the Full AdvisoryGet the latest Linux and open source security news straight to your inbox.