[El-errata] ELSA-2026-2920 Important: Oracle Linux 9 grafana security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-2920

http://linux.oracle.com/errata/ELSA-2026-2920.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
grafana-10.2.6-18.el9_7.x86_64.rpm
grafana-selinux-10.2.6-18.el9_7.x86_64.rpm

aarch64:
grafana-10.2.6-18.el9_7.aarch64.rpm
grafana-selinux-10.2.6-18.el9_7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/grafana-10.2.6-18.el9_7.src.rpm

Related CVEs:

CVE-2025-61726
CVE-2025-61728
CVE-2025-61729
CVE-2025-68121
CVE-2026-21721




Description of changes:

[10.2.6-17]
- Resolves RHEL-144959: CVE-2026-21721
- Resolves RHEL-146863: CVE-2025-61726
- Resolves RHEL-147081: CVE-2025-61729
- Resolves RHEL-147370: CVE-2025-61728
- Resolves RHEL-149621: CVE-2025-68121

[10.2.6-17]
- Resolves RHEL-125692: CVE-2025-58183
- Resolves RHEL-120426: Grafana-selinux prevents plugins from searching cgroups

[10.2.6-15]
- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections

[10.2.6-13]
- Resolves RHEL-89953: CVE-2025-4123

[10.2.6-12]
- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana

[10.2.6-11]
- Resolves RHEL-84636: CVE-2025-30204

[10.2.6-10]
- Resolves RHEL-75919: grafana selinux issue with autofs_t

[10.2.6-9]
- Resolves RHEL-69939: allow mssql datasource in selinux policy

[10.2.6-8]
- Resolves RHEL-62312: CVE-2024-47875

[10.2.6-5]
- Resolves RHEL-47185