smarthome.codes

Grafana 11.6.1, 11.5.4 & 11.4.4 Security Updates and Enhancements

Grafana

Grafana Releases: Security Updates and Improvements in Versions 11.6.1, 11.5.4, and 11.4.4

Grafana has recently released important updates for its platform that include several critical security improvements and feature enhancements. Versions 11.6.1, 11.5.4, and 11.4.4 address known vulnerabilities and bring useful optimizations. These updates are particularly relevant for administrators and users of Grafana installations.

Key Takeaways:

  • All three versions fix critical security vulnerabilities (CVE-2025-3454 and CVE-2025-2703)
  • Update of Go version to 1.24.2 in all recent releases
  • Version 11.6.1 additionally fixes CVE-2025-3260 and updates the JWT library (CVE-2025-30204)
  • Improved support for Prometheus data sources from cloud partners
  • Numerous Azure Monitor improvements in version 11.5.4
  • Fixed issues with InfluxDB variable interpolation and LDAP tests

Grafana Version 11.6.1: The Latest Update

Features and Enhancements

  • Updated JWT library to address CVE-2025-30204
  • Corrected slug in self-referencing data links in DashboardScenePage
  • Updated github.com/redis/go-redis/v9 to version 9.7.3 to address CVE-2025-29923
  • Updated to Go 1.24.2
  • Improved interactive tooltip handler in GrafanaUI
  • Added support for Prometheus data sources from cloud partners

Bug Fixes

  • Added role-based access control for Alertmanager via the reqAction field
  • Removed blurred background from overlay backdrops to improve performance
  • Fixed nested variable interpolation in InfluxDB
  • Fixed page crashes in LDAP tests
  • Corrected linking between organizations
  • Fixed multiple security vulnerabilities: CVE-2025-3454, CVE-2025-2703, and CVE-2025-3260

Grafana Version 11.5.4: Key Changes

Features and Enhancements

  • Azure Monitor Improvements:
    • Filtering namespaces by resource group
    • Support for custom namespaces and custom metrics variable queries
    • Resource picker optimizations
    • Support for more complex variable interpolation
    • Improvements to variable editor and resource picker
  • Updated dependencies with known vulnerabilities
  • Corrected slug in self-referencing data links in DashboardScenePage
  • Updated github.com/redis/go-redis/v9 to version 9.6.3 to address CVE-2025-29923
  • Updated to Go 1.24.2
  • Added support for Prometheus data sources from cloud partners

Bug Fixes

  • Fixed nested variable interpolation in InfluxDB
  • Fixed page crashes in LDAP tests
  • Fixed security vulnerabilities CVE-2025-3454 and CVE-2025-2703

Grafana Version 11.4.4: Security Updates

Features and Enhancements

  • Updated to Go 1.24.2 (Enterprise)

Bug Fixes

  • Fixed security vulnerabilities CVE-2025-3454 and CVE-2025-2703

For more information and downloads, visit:

Adriana

I have been fascinated by everything to do with technology for many years, especially when it comes to making my own home smarter and more comfortable. For me, a smart home is not just a technical gimmick, but above all a real improvement in quality of life. It all started very small with a networked thermostat, but this little experiment quickly turned into a great passion. My home now comprises a sophisticated system of lighting control, heating automation and security solutions that make my everyday life noticeably easier. For me, a smart home is much more than just technology: it means convenience, sustainability and a real improvement in quality of life. It is particularly important to me that systems are intuitive to use and can be easily integrated into everyday life, regardless of brand or manufacturer. My vision is a home that not only reacts to commands, but also thinks and acts with foresight. I dream of a smart home that saves energy, adapts individually to residents and the environment and always puts people at the center.

Here on my blog, I share personal experiences, helpful tips and interesting insights on the topic of smart homes.
I'm particularly looking forward to exchanging ideas with you, whether you're just starting out with your smart home or are already a real pro.

Do you have any questions, suggestions or just want to chat? Then feel free to write me a comment.

Add comment