UnratedFix available

mimir 3.2.3

Type: patchSources: Mimir

Grafana Mimir 3.2.3 updates Go and the distroless runtime images to address compromised CA trust, and updates golang.org/x/net for HTTP/2 security fixes.

Products: Grafana Mimir
Affected versions: Not specified
Fixed versions: 3.2.3
CVEs: CVE-2026-111943, CVE-2026-56857, CVE-2026-56866, CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439, CVE-2026-94440, CVE-2026-94448, CVE-2026-97030, CVE-2026-97031, CVE-2026-97032
Confirmed fixed CVEs: Not specified
Updated in this feed: 28 Oct 2026, 16:09 UTC · Revision 1

Source evidence

mimir 3.2.3

github-grafana-mimir · Original source

Published 22 Oct 2026, 11:54 UTC

Grafana Mimir 3.2.3 updates Go and the distroless runtime images to address compromised CA trust, and updates golang.org/x/net for HTTP/2 security fixes.

[BUGFIX] Upgrade Go to 1.26.10 and update distroless runtime images to address compromised CA trust (CVE-2026-111943).

Grafana Mimir

Fixed versions: 3.2.3

Complete source record

{
  "id": "60779c2f50cd1c5bed2ade182c721735e31060ce4e2cba780d2839ad6d2546ce",
  "url": "https://github.com/grafana/mimir/releases/tag/mimir-3.2.3",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "mimir 3.2.3",
    "summary": "Grafana Mimir 3.2.3 updates Go and the distroless runtime images to address compromised CA trust, and updates golang.org/x/net for HTTP/2 security fixes.",
    "evidence": "[BUGFIX] Upgrade Go to 1.26.10 and update distroless runtime images to address compromised CA trust (CVE-2026-111943).",
    "products": [
      {
        "name": {
          "value": "Grafana Mimir",
          "evidence": "Changelog 3.2.3 Grafana Mimir"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.2.3",
            "evidence": "All changes in this release: mimir-3.2.2...mimir-3.2.3"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-111943",
        "evidence": "address compromised CA trust (CVE-2026-111943)"
      },
      {
        "value": "CVE-2026-56857",
        "evidence": "address CVE-2026-56857, CVE-2026-56866"
      },
      {
        "value": "CVE-2026-56866",
        "evidence": "CVE-2026-56857, CVE-2026-56866"
      },
      {
        "value": "CVE-2026-78659",
        "evidence": "CVE-2026-78659, CVE-2026-78660"
      },
      {
        "value": "CVE-2026-78660",
        "evidence": "CVE-2026-78659, CVE-2026-78660"
      },
      {
        "value": "CVE-2026-78663",
        "evidence": "CVE-2026-78663, CVE-2026-78667"
      },
      {
        "value": "CVE-2026-78667",
        "evidence": "CVE-2026-78663, CVE-2026-78667"
      },
      {
        "value": "CVE-2026-78669",
        "evidence": "CVE-2026-78669, CVE-2026-94439"
      },
      {
        "value": "CVE-2026-94439",
        "evidence": "CVE-2026-78669, CVE-2026-94439"
      },
      {
        "value": "CVE-2026-94440",
        "evidence": "CVE-2026-94440, CVE-2026-94448"
      },
      {
        "value": "CVE-2026-94448",
        "evidence": "CVE-2026-94440, CVE-2026-94448"
      },
      {
        "value": "CVE-2026-97030",
        "evidence": "CVE-2026-97030, CVE-2026-97031"
      },
      {
        "value": "CVE-2026-97031",
        "evidence": "CVE-2026-97030, CVE-2026-97031"
      },
      {
        "value": "CVE-2026-97032",
        "evidence": "CVE-2026-97032."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-grafana-mimir",
  "document_id": 21301,
  "published_at": "2026-10-22T11:54:46+00:00"
}