Important: grafana security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:10226", "synopsis": "Important: grafana security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for grafana.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. \n\nSecurity Fix(es):\n\n* grafana: Grafana: Information disclosure of data-source passwords via public dashboards (CVE-2026-27877)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2452293", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2452293", "description": ""}], "cves": [{"name": "CVE-2026-27877", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27877", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cvss3BaseScore": "7.5", "cwe": "CWE-201"}], "references": [], "publishedAt": "2026-04-28T00:03:41.435121Z", "rpms": {"Rocky Linux 9": {"nvras": ["grafana-0:10.2.6-20.el9_7.aarch64.rpm", "grafana-0:10.2.6-20.el9_7.ppc64le.rpm", "grafana-0:10.2.6-20.el9_7.s390x.rpm", "grafana-0:10.2.6-20.el9_7.src.rpm", "grafana-0:10.2.6-20.el9_7.x86_64.rpm", "grafana-debuginfo-0:10.2.6-20.el9_7.aarch64.rpm", "grafana-debuginfo-0:10.2.6-20.el9_7.ppc64le.rpm", "grafana-debuginfo-0:10.2.6-20.el9_7.s390x.rpm", "grafana-debuginfo-0:10.2.6-20.el9_7.x86_64.rpm", "grafana-debugsource-0:10.2.6-20.el9_7.aarch64.rpm", "grafana-debugsource-0:10.2.6-20.el9_7.ppc64le.rpm", "grafana-debugsource-0:10.2.6-20.el9_7.s390x.rpm", "grafana-debugsource-0:10.2.6-20.el9_7.x86_64.rpm","grafana-selinux-0:10.2.6-20.el9_7.aarch64.rpm", "grafana-selinux-0:10.2.6-20.el9_7.ppc64le.rpm", "grafana-selinux-0:10.2.6-20.el9_7.s390x.rpm", "grafana-selinux-0:10.2.6-20.el9_7.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important grafana update for Rocky Linux 9 mitigates data exposure threats. Stay secure with this advisory.. grafana security update, Rocky Linux 9, information disclosure, data security, patching. . Severity: Important. LinuxSecurity.com Team
Several security issues were fixed in PostgreSQL.. ========================================================================== Ubuntu Security Notice USN-7358-1 March 19, 2025 postgresql-9.5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in PostgreSQL. Software Description: - postgresql-9.5: Object-relational SQL database Details: Wolfgang Walther discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. (CVE-2024-10976) Jacob Champion discovered that PostgreSQL clients used untrusted server error messages. An attacker that is able to intercept network communications could possibly use this issue to inject error messages that could be interpreted as valid query results. (CVE-2024-10977) Tom Lane discovered that PostgreSQL incorrectly handled certain privilege assignments. A remote attacker could possibly use this issue to view or change different rows from those intended. (CVE-2024-10978) Coby Abrams discovered that PostgreSQL incorrectly handled environment variables. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-10979) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS postgresql-9.5 9.5.25-0ubuntu0.16.04.1+esm10 Available with Ubuntu Pro postgresql-client-9.5 9.5.25-0ubuntu0.16.04.1+esm10 Available with Ubuntu Pro After a standard system update you need to restart PostgreSQL to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7358-1 CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979 . Urgent updates for PostgreSQL on Ubuntu 16.04 to address multiple critical security issues. Action recommended!. security, postgresql, ==================================================. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.