Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Grafana could consume excessive memory during data handling
published 1 year ago
Summary
The Grafana dashboard software in Almalinux can allocate far more memory than needed when it reads certain data headers, which could slow down or crash the system. This problem is fixed in a recent update, so applying the latest Grafana package is recommended to keep your monitoring dashboards running smoothly.
What to do
- Update almalinux grafana to version 10.2.6-15.el10_0.
- Update almalinux grafana-selinux to version 10.2.6-15.el10_0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | grafana |
< 10.2.6-15.el10_0 Fix: upgrade to 10.2.6-15.el10_0
|
| AlmaLinux:10 | almalinux | grafana-selinux |
< 10.2.6-15.el10_0 Fix: upgrade to 10.2.6-15.el10_0
|
Original advisory text
Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:7475 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 Third Party Advisory
- https://bugzilla.redhat.com/2354195 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2025-7475.html Vendor Advisory
Timeline
Published13 May 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:7475 · OSV
Track software like this
Free during beta