ALSA-2026:83544

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2026-83544.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83544.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2026:83544

Related

CVE-2026-15815

Published

2026-10-15T00:00:00Z

Modified

2026-10-15T13:15:02Z

Summary

Important: grafana security update

Details

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION (CVE-2026-15815)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / grafana

Package

Name: grafana
Purl: pkg:rpm/almalinux/grafana

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.2.10-35.el8_10

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83544.json"

AlmaLinux:8 / grafana-selinux

Package

Name: grafana-selinux
Purl: pkg:rpm/almalinux/grafana-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.2.10-35.el8_10

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83544.json"