Skip to content
OpenAdvisories

Source

Rocky Linux Security Advisories

Source: https://errata.rockylinux.org/

All Critical High Medium Low With exploited CVEs

4,721 results · Feed

  • Medium max 5.5
    RLSA-2023:6944 1 CVE

    Moderate: protobuf-c security update

    The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fix(es): * protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468) For more details about the security issue(s), including the impact, a CVSS score, ack…

  • High max 8.6
    RLSA-2026:95725 6 CVEs

    Important: tesseract security update

    A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read l…

  • Low max 6.5
    RLSA-2023:6961 1 CVE

    Low: qt5-qtsvg security update

    Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices. Security Fix(es): * qt: Uninitialized variable usage i…

  • Medium max 7.5
    RLSA-2023:4330 4 CVEs

    Moderate: nodejs:18 security, bug fix, and enhancement update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs (18). (BZ#2223314, BZ#2223316, BZ#2223318, BZ#2223319, BZ#…

  • High max 6.8
    RLSA-2026:95638 1 CVE

    Important: go-toolset:rhel8 security update

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more detail…

  • Medium max 6.3
    RLSA-2026:95618 4 CVEs

    Moderate: glibc security update

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…

  • High max 9.8
    RLSA-2026:95100 6 CVEs

    Important: kernel-rt security, bug fix, and enhancement update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: net/smc…

  • High max 7.8
    RLSA-2026:95482 1 CVE

    Important: gimp:2.8 security, bug fix, and enhancement update

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-lev…

  • High max 7.5
    RLSA-2026:95519 5 CVEs

    Important: delve security update

    Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…

  • Medium max 6.1
    RLSA-2026:95570 3 CVEs

    Moderate: cockpit-files security update

    A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition (CVE-2026-91203) * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink fol…

  • High max 9.8
    RLSA-2026:95370 16 CVEs

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541) * kernel: sctp: avoid auth_enable sysctl UAF during netns teardow…

  • High max 9.8
    RLSA-2026:95367 8 CVEs

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (CVE-2026-64378) * kernel: sunrpc: pin svc_xprt across the asynchron…

  • High max 8.6
    RLSA-2026:95086 6 CVEs

    Important: tesseract security update

    A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read l…

  • High max 8.7
    RLSA-2026:95272 1 CVE

    Important: osbuild-composer security update

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…

  • Medium max 7.8
    RLSA-2026:95281 1 CVE

    Moderate: xorg-x11-server-Xwayland security update

    Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), includin…

  • High max 7.5
    RLSA-2026:95518 2 CVEs

    Important: delve security update

    Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…

  • Medium max 5.3
    RLSA-2023:7022 1 CVE

    Moderate: tang security and bug fix update

    Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project. Security Fix(es…

  • Medium max 7.5
    RLSA-2023:6940 2 CVEs

    Moderate: mod_auth_openidc:2.3 security and bug fix update

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: Open Redirect in oid…

  • High max 8.6
    RLSA-2026:95085 6 CVEs

    Important: tesseract security update

    A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read l…

  • High max 9.8
    RLSA-2026:95212 6 CVEs

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (…

  • High max 9.6
    RLSA-2026:95194 17 CVEs

    Important: webkit2gtk3 security update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049) * chromium-browser: skia: Skia: Cross-origin data disclosure via…

  • High max 8.8
    RLSA-2026:94629 14 CVEs

    Important: dpdk security update

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup (CVE-2026-8…

  • Critical max 9.1
    RLSA-2026:94500 5 CVEs

    Critical: fence-agents security update

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: pyjwt: Authentication …

  • High max 7.5
    RLSA-2026:94749 1 CVE

    Important: python-dns security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 8.8
    RLSA-2026:94630 14 CVEs

    Important: dpdk security update

    The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup (CVE-2026-8…

  • High max 7.5
    RLSA-2026:94533 3 CVEs

    Important: cockpit security update

    Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Denial …

  • High max 7.1
    RLSA-2026:94519 1 CVE

    Important: raptor2 security update

    Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (C…

  • High max 8.8
    RLSA-2026:94514 13 CVEs

    Important: freerdp security, bug fix, and enhancement update

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of …

  • High max 7.4
    RLSA-2026:94510 3 CVEs

    Important: freerdp security update

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of …

  • Critical max 9.1
    RLSA-2026:94501 5 CVEs

    Critical: fence-agents security update

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: pyjwt: Authentication …

  • Medium max 7.5
    RLSA-2026:94485 2 CVEs

    Moderate: cockpit security, bug fix, and enhancement update

    Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Denial …

  • Medium max 7.8
    RLSA-2026:93930 2 CVEs

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (CVE-2026-63987) * kernel: ethtool: cmis: require exact CDB reply length (C…

  • Medium max 7.8
    RLSA-2026:93911 1 CVE

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996) For more details about the security issue(s), including the impact, a CVSS score, …

  • High max 8.1
    RLSA-2026:94011 5 CVEs

    Important: bind9.16 security update

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …

  • High max 9.8
    RLSA-2026:93413 16 CVEs

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977) * kernel: x86/CPU/AMD: Prevent improper isolation of shared resources…

  • High max 7.3
    RLSA-2026:93978 1 CVE

    Important: ghostscript security update

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: Reintroduction of .charkeys -dS…

  • High max 7.1
    RLSA-2026:93924 2 CVEs

    Important: qt5-qtbase security update

    Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML seriali…

  • High max 7.5
    RLSA-2026:93617 5 CVEs

    Important: opentelemetry-collector security update

    Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fix(es): * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial …

  • High max 7.5
    RLSA-2026:93596 5 CVEs

    Important: opentelemetry-collector security update

    Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fix(es): * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial …

  • High max 9.8
    RLSA-2026:93469 7 CVEs

    Important: tomcat security update

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Security constraint bypass due to improper access control (CVE-2026-65182) * tomcat: Apache Tomcat: Access control by…