Rocky Linux

Latest advisories

• High max 7.5
  RLSA-2026:96234 7 CVEs

  Important: nodejs:22 security, bug fix, and enhancement update

  Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns …

  Nov 10, 2026
• High max 7.8
  RLSA-2026:96226 10 CVEs

  Important: nodejs:24 security update

  Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) * brace-expansi…

  Nov 10, 2026
• Medium max 10.0
  RLSA-2026:96068 4 CVEs 1 exploited

  Moderate: ruby:3.3 security, bug fix, and enhancement update

  Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: double free issue in regular expression parser (CVE-2026-89078) * ruby: integer ov…

  Nov 9, 2026
• High max 7.7
  RLSA-2026:96078 1 CVE

  Important: squid:4 security update

  Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid: squid: Request Smuggling in HTTP Transfer-Encoding (CVE-2026-61642) For more details about the security issue(s), including the…

  Nov 9, 2026
• Medium max 10.0
  RLSA-2026:96120 3 CVEs 1 exploited

  Moderate: ruby:4.0 security, bug fix, and enhancement update

  Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: integer overflow issue in regular expression compiler (CVE-2026-93577) * ruby: int…

  Nov 9, 2026