<div class="container">
<h1>Security update for grafana</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:3718-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-08-24T09:23:41Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262187">bsc#1262187</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263272">bsc#1263272</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264764">bsc#1264764</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265281">bsc#1265281</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265282">bsc#1265282</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265283">bsc#1265283</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265284">bsc#1265284</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265285">bsc#1265285</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265286">bsc#1265286</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265287">bsc#1265287</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265288">bsc#1265288</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265289">bsc#1265289</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265290">bsc#1265290</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266600">bsc#1266600</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267153">bsc#1267153</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1271327">bsc#1271327</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1271331">bsc#1271331</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274217">bsc#1274217</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/MSQA-1059">jsc#MSQA-1059</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-16512">jsc#PED-16512</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2025-12141.html">CVE-2025-12141</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2025-30153.html">CVE-2025-30153</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-21725.html">CVE-2026-21725</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-25680.html">CVE-2026-25680</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-25681.html">CVE-2026-25681</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-27136.html">CVE-2026-27136</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-28374.html">CVE-2026-28374</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-28376.html">CVE-2026-28376</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-28379.html">CVE-2026-28379</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-28380.html">CVE-2026-28380</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-28383.html">CVE-2026-28383</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33376.html">CVE-2026-33376</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33377.html">CVE-2026-33377</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33378.html">CVE-2026-33378</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33380.html">CVE-2026-33380</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33381.html">CVE-2026-33381</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-33382.html">CVE-2026-33382</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-39821.html">CVE-2026-39821</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-39882.html">CVE-2026-39882</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-41607.html">CVE-2026-41607</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-42502.html">CVE-2026-42502</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-42506.html">CVE-2026-42506</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-12141</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-12141</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-12141</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">1.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:X</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-12141</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-30153</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-30153</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-21725</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-21725</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-21725</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.6</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-21725</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">2.0</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25680</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25680</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25680</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25681</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25681</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-25681</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-27136</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-27136</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-27136</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28374</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28374</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28374</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28376</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28376</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28376</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28379</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28379</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28379</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28380</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28380</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28380</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28383</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28383</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-28383</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33376</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33376</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33376</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33377</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33377</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33377</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33378</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33378</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33378</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33380</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.0</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33380</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33380</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33380</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33381</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33381</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33381</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33381</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33382</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-33382</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.6</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39882</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39882</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41607</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41607</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41607</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41607</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42502</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42502</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42502</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42506</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42506</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-42506</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.1</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP7</li>
<li class="list-group-item">SUSE Package Hub 15 15-SP7</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves 22 vulnerabilities and contains two features can now be installed.</p>
<h2>Description:</h2>
<p>This update for grafana fixes the following issues:</p>
<p>grafana updated from version 11.6.14+security04 to version 12.4.5:</p>
<p>Security fixes:</p>
<ul>
<li>CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217)</li>
<li>CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331)</li>
<li>CVE-2025-12141: Fixed information leakage in Grafana Alerting (bsc#1262187)</li>
<li>CVE-2026-41607: Fix potential information disclosure in Apache Thrift (bsc#1263272)</li>
</ul>
<p>Breaking chahnges introduced in version 12.0.0:</p>
<ul>
<li>BREAKING: Removed AngularJS and all deprecated UI Extensions APIs.</li>
<li>BREAKING: Enforced stricter version compatibility checks in plugin CLI install commands.</li>
<li>BREAKING: Enabled the failWrongDSUID feature flag by default, which rejects data sources with incorrect UIDs.</li>
</ul>
<p>Other changes introduced from version 11.6.14+security04 to version 12.4.5 (jsc#PED-16512):</p>
<ul>
<li>Add Legal-Review-Notice (bsc#1271327)</li>
<li>Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid</li>
<li>Analytics: Keep internal dashboard id.</li>
<li>Reporting: Correctly apply appSubURL to report settings requests</li>
<li>Alerting: Document Grafana HA Alertmanager cluster metrics prefix change.</li>
<li>Dependency updates to core plugins and UI libraries.</li>
<li>Updates to data source provisioning and dashboard schemas.</li>
<li>Introduced dynamic dashboards in public preview.</li>
<li>Added a new side toolbar that replaces the second top toolbar to provide additional vertical space.</li>
<li>Added the ability to create dashboards from templates using sample data.</li>
<li>Revamped the gauge visualization with rounded bars, configurable bar thickness, and endpoint markers.</li>
<li>Added support to map one variable to multiple values.</li>
<li>Released a completely redesigned logs visualization.</li>
<li>Added the ability to export dashboards directly as PNG images.</li>
<li>Introduced an interactive learning experience within the Grafana UI.</li>
<li>Added a Switch template variable type to quickly toggle between values in queries.</li>
<li>Added functionality to style table cells using CSS properties via the field cell option.</li>
<li>Added support for Entra Workload Identity to enhance authentication capabilities with federated credentials.</li>
<li>Redesigned the alert rule list page.</li>
<li>Renamed Mute Timings to Active Time Intervals in Grafana Alerting.</li>
<li>Added support for Service Account Impersonation in the BigQuery data source.</li>
<li>Introduced the Grafana Advisor in public preview.</li>
<li>Introduced a new dashboard schema to replace the original single grid layout.</li>
<li>MIGRATION: Triggered a full-table rewrite for the annotation table, which may temporarily increase disk usage.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Package Hub 15 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3718=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64)
<ul>
<li>grafana-debuginfo-12.4.5-150200.3.91.1</li>
<li>grafana-12.4.5-150200.3.91.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2025-12141.html">https://www.suse.com/security/cve/CVE-2025-12141.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2025-30153.html">https://www.suse.com/security/cve/CVE-2025-30153.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-21725.html">https://www.suse.com/security/cve/CVE-2026-21725.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-25680.html">https://www.suse.com/security/cve/CVE-2026-25680.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-25681.html">https://www.suse.com/security/cve/CVE-2026-25681.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-27136.html">https://www.suse.com/security/cve/CVE-2026-27136.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28374.html">https://www.suse.com/security/cve/CVE-2026-28374.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28376.html">https://www.suse.com/security/cve/CVE-2026-28376.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28379.html">https://www.suse.com/security/cve/CVE-2026-28379.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28380.html">https://www.suse.com/security/cve/CVE-2026-28380.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28383.html">https://www.suse.com/security/cve/CVE-2026-28383.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33376.html">https://www.suse.com/security/cve/CVE-2026-33376.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33377.html">https://www.suse.com/security/cve/CVE-2026-33377.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33378.html">https://www.suse.com/security/cve/CVE-2026-33378.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33380.html">https://www.suse.com/security/cve/CVE-2026-33380.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33381.html">https://www.suse.com/security/cve/CVE-2026-33381.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-33382.html">https://www.suse.com/security/cve/CVE-2026-33382.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-39821.html">https://www.suse.com/security/cve/CVE-2026-39821.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-39882.html">https://www.suse.com/security/cve/CVE-2026-39882.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-41607.html">https://www.suse.com/security/cve/CVE-2026-41607.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-42502.html">https://www.suse.com/security/cve/CVE-2026-42502.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-42506.html">https://www.suse.com/security/cve/CVE-2026-42506.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262187">https://bugzilla.suse.com/show_bug.cgi?id=1262187</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263272">https://bugzilla.suse.com/show_bug.cgi?id=1263272</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264764">https://bugzilla.suse.com/show_bug.cgi?id=1264764</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265281">https://bugzilla.suse.com/show_bug.cgi?id=1265281</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265282">https://bugzilla.suse.com/show_bug.cgi?id=1265282</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265283">https://bugzilla.suse.com/show_bug.cgi?id=1265283</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265284">https://bugzilla.suse.com/show_bug.cgi?id=1265284</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265285">https://bugzilla.suse.com/show_bug.cgi?id=1265285</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265286">https://bugzilla.suse.com/show_bug.cgi?id=1265286</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265287">https://bugzilla.suse.com/show_bug.cgi?id=1265287</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265288">https://bugzilla.suse.com/show_bug.cgi?id=1265288</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265289">https://bugzilla.suse.com/show_bug.cgi?id=1265289</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265290">https://bugzilla.suse.com/show_bug.cgi?id=1265290</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266600">https://bugzilla.suse.com/show_bug.cgi?id=1266600</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267153">https://bugzilla.suse.com/show_bug.cgi?id=1267153</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1271327">https://bugzilla.suse.com/show_bug.cgi?id=1271327</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1271331">https://bugzilla.suse.com/show_bug.cgi?id=1271331</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274217">https://bugzilla.suse.com/show_bug.cgi?id=1274217</a>
</li>
<li>
<a href="https://jira.suse.com/browse/MSQA-1059">https://jira.suse.com/browse/MSQA-1059</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-16512">https://jira.suse.com/browse/PED-16512</a>
</li>
</ul>
</div>