Skip to content
OpenAdvisories

Source

Rocky Linux Security Advisories

Source: https://errata.rockylinux.org/

2,966 results · Clear filters · Feed

  • High max 6.0

    Important: ruby:3.3 security, bug fix, and enhancement update

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) *…

  • High max 6.0

    Important: ruby:4.0 security, bug fix, and enhancement update

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) *…

  • High max 6.0

    Important: ruby security, bug fix, and enhancement update

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) *…

  • High max 6.0

    Important: ruby4.0 security, bug fix, and enhancement update

    Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * zlib: zli…

  • High max 6.0

    Important: ruby:3.3 security, bug fix, and enhancement update

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820) *…

  • High max 7.5

    Important: go-toolset:rhel8 security, bug fix, and enhancement update

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: g…

  • High max 7.8

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GS…

  • High max 8.2

    Important: nginx security update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …

  • High max 7.8

    Important: gstreamer1-plugins-base security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer: GStreamer: Arbitrary code execution via…

  • High max 7.8

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GS…

    first Aug 25, 2026
  • High max 8.1

    Important: python-urwid security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 7.8

    Important: gstreamer1-plugins-base security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer: GStreamer: Arbitrary code execution via…

    first Aug 25, 2026
  • High max 9.8
    RLSA-2026:58899 31 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site iso…

    first Aug 25, 2026
  • High max 7.5

    Important: python-pyasn1 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 7.8

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GS…

    first Aug 25, 2026
  • High max 7.8

    Important: python3.14 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 7.8

    Important: python3.14 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 9.8
    RLSA-2026:58897 31 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site iso…

    first Aug 25, 2026
  • High max 7.7

    Important: nodejs24 security update

    Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications…

    first Aug 25, 2026
  • High max 7.5

    Important: python-pyasn1 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 7.5

    Important: python-pyasn1 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

    first Aug 25, 2026
  • High max 7.8

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer: GS…

    first Aug 25, 2026
  • High max 9.8
    RLSA-2026:58898 31 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component (CVE-2026-74983) * firefox: thunderbird: Site iso…

    first Aug 25, 2026
  • High max 7.8

    Important: sqlite security update

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the p…

    first Aug 25, 2026
  • High max 7.8

    Important: sqlite security update

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the p…

    first Aug 25, 2026
  • High max 7.8

    Important: sqlite security update

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the p…

    first Aug 25, 2026
  • High max 8.2

    Important: nginx:1.26 security update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …

  • High max 7.5
    RLSA-2026:22121 11 CVEs

    Important: golang security update

    The golang packages provide the Go programming language compiler. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum…

  • High max 7.5
    RLSA-2026:22120 11 CVEs

    Important: golang security update

    The golang packages provide the Go programming language compiler. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum…

  • High max 7.5
    RLSA-2026:22112 11 CVEs

    Important: go-toolset:rhel8 security update

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * cmd/go: golang: Go command (c…

  • High max 7.8

    Important: nodejs:24 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlit…

    first Aug 25, 2026
  • High max 7.8

    Important: nodejs:22 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlit…

    first Aug 25, 2026
  • High max 7.8

    Important: nodejs:22 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlit…

    first Aug 25, 2026
  • High max 7.8

    Important: nodejs:24 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlit…

    first Aug 25, 2026
  • High max 8.2

    Important: nginx:1.24 security update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …

    first Aug 25, 2026
  • High max 7.8

    Important: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 7.8

    Important: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 7.8

    Important: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 8.2

    Important: nginx security update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …

  • High max 8.2

    Important: nginx:1.24 security update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …