Skip to content
OpenAdvisories

Source

Rocky Linux Security Advisories

Source: https://errata.rockylinux.org/

All Critical High Medium Low With exploited CVEs

2,966 results · Clear filters · Feed

  • High max 8.8
    RLSA-2026:36956 4 CVEs

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor …

  • High max 9.3
    RLSA-2026:36018 11 CVEs

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service resc…

  • High max 8.8
    RLSA-2026:36366 1 CVE

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) For more details about the security issue(s), including the impac…

  • High max 8.8
    RLSA-2026:36365 1 CVE

    Important: kernel-rt security update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) For more…

  • High max 7.7
    RLSA-2026:37207 1 CVE

    Important: freerdp security update

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Out-of-bou…

  • High max 7.6
    RLSA-2026:37129 1 CVE

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…

  • High max 7.5
    RLSA-2026:36790 2 CVEs 1 exploited

    Important: tomcat9 security, bug fix, and enhancement update

    Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is…

  • High max 7.5
    RLSA-2026:36788 2 CVEs 1 exploited

    Important: tomcat security, bug fix, and enhancement update

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat…

  • High max 7.5
    RLSA-2026:36617 1 CVE

    Important: oci-seccomp-bpf-hook security update

    OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net: golang: Go net package: Denia…

  • High max 7.7
    RLSA-2026:35841 15 CVEs

    Important: nodejs24 security, bug fix, and enhancement update

    Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications…

  • High max 9.1
    RLSA-2026:37410 2 CVEs

    Important: buildah security update

    The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working conta…

  • High max 9.1
    RLSA-2026:37123 7 CVEs

    Important: podman security, bug fix, and enhancement update

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/c…

  • High max 9.1
    RLSA-2026:37072 8 CVEs

    Important: podman security, bug fix, and enhancement update

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/c…

  • High max 7.5
    RLSA-2026:36879 2 CVEs 1 exploited

    Important: tomcat security, bug fix, and enhancement update

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat…

  • High max 8.8
    RLSA-2026:36834 4 CVEs

    Important: gstreamer1-plugins-bad-free security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Denial of ser…

  • High max 5.4
    RLSA-2026:36832 1 CVE

    Important: libreoffice security update

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and p…

  • High max 8.8
    RLSA-2026:36749 4 CVEs

    Important: gstreamer1-plugins-bad-free security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Denial of ser…

  • High max 7.6
    RLSA-2026:36675 1 CVE

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…

  • High max 7.5
    RLSA-2026:37137 2 CVEs 1 exploited

    Important: tomcat security, bug fix, and enhancement update

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat…

  • High max 8.8
    RLSA-2026:37130 2 CVEs

    Important: gstreamer1-plugins-bad-free security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * gstreamer1-plugins-bad-free: GStreamer: Heap buffer o…

  • High max 7.6
    RLSA-2026:36774 1 CVE

    Important: gstreamer1-plugins-good security update

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…

  • High max 8.8
    RLSA-2026:36201 2 CVEs

    Important: 389-ds:1.4 security update

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buf…

  • High max 8.1
    RLSA-2026:36639 1 CVE

    Important: nginx:1.26 security, bug fix, and enhancement update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with craft…

  • High max 9.1
    RLSA-2026:36188 1 CVE

    Important: perl-HTTP-Daemon security update

    The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fix(es): * perl-HTTP-Daemon: HTTP::Daemon: Arbitrary c…

  • High max 4.1
    RLSA-2026:36315 1 CVE

    Important: python3.14-pip security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 8.8
    RLSA-2026:36203 5 CVEs

    Important: freerdp security update

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Remote cod…

  • High max 9.1
    RLSA-2026:36199 4 CVEs

    Important: buildah security update

    The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working conta…

  • High max 4.1
    RLSA-2026:36193 1 CVE

    Important: python3.14-pip security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 9.1
    RLSA-2026:36187 1 CVE

    Important: perl-HTTP-Daemon security update

    The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fix(es): * perl-HTTP-Daemon: HTTP::Daemon: Arbitrary c…

  • High max 7.7
    RLSA-2026:35842 13 CVEs

    Important: nodejs22 security, bug fix, and enhancement update

    Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time appl…

  • High max 8.1
    RLSA-2026:36618 1 CVE

    Important: nginx:1.24 security, bug fix, and enhancement update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with craft…

  • High max 8.1
    RLSA-2026:36364 1 CVE

    Important: nginx security, bug fix, and enhancement update

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with craft…

  • High max 7.5
    RLSA-2026:36317 2 CVEs

    Important: skopeo security update

    The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * crypto/x…

  • High max 8.8
    RLSA-2026:36196 2 CVEs

    Important: 389-ds-base security update

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buf…

  • High max 8.8
    RLSA-2026:36195 2 CVEs

    Important: 389-ds-base security update

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buf…

  • High max 9.1
    RLSA-2026:36189 1 CVE

    Important: perl-HTTP-Daemon security update

    The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests. Security Fix(es): * perl-HTTP-Daemon: HTTP::Daemon: Arbitrary c…

  • High max 7.5
    RLSA-2026:35832 2 CVEs

    Important: golang-github-openprinting-ipp-usb security update

    HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (C…

  • High max 9.6
    RLSA-2026:35829 1 CVE

    Important: grafana-pcp security update

    The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang.org/x/net/idna: golang: golan…

  • High max 9.6
    RLSA-2026:35828 1 CVE

    Important: grafana security update

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-3982…

  • High max 9.6
    RLSA-2026:35827 1 CVE

    Important: grafana security update

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-3982…