Red Hat Security Advisory

RHSA-2026:56223

grafana-pcp security update

Released 2026-08-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-15.el9_6

Fixes 4 records

TI-2026-28703 CVE-2026-39821 · GHSA-w2q5-6q6x-x959

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

MEDIUM 47

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01834 Published 2026-05-22 Partial fix · 1.25.13, 1.26.6 +2 CWE-1289

TI-2026-26182 CVE-2026-33810 · GHSA-fv83-x2xw-2j55

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

MEDIUM 42

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00346 Published 2026-04-08 Partial fix · 1.26.2 CWE-295

TI-2026-30787 CVE-2026-42504 · GHSA-h524-452v-82p9

Quadratic complexity in WordDecoder.DecodeHeader in mime

MEDIUM 40

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2026-06-02 Partial fix · 1.25.11, 1.26.4 CWE-407

TI-2026-21587 CVE-2026-27137 · GHSA-7hfw-r8qc-89v4

Incorrect enforcement of email constraints in crypto/x509

MEDIUM 40

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2026-03-06 Partial fix · 1.26.1 CWE-295