Skip to content
OpenAdvisories

Source

Rocky Linux Security Advisories

Source: https://errata.rockylinux.org/

All Critical High Medium Low With exploited CVEs

4,775 results · Feed

  • High max 7.5
    RLSA-2026:80504 1 CVE

    Important: jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

    This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile (binary JSON), XML, CBOR (another kind of binary JSON), YAML. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: tools.jackson.co…

  • High max 8.8
    RLSA-2026:80497 4 CVEs

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as r…

  • High max 8.8
    RLSA-2026:80687 4 CVEs

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as r…

  • Medium max 6.9
    RLSA-2026:80675 1 CVE

    Moderate: libxml2 security update

    The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) For more details about the s…

  • Medium max 7.3
    RLSA-2026:80664 1 CVE

    Moderate: environment-modules security update

    The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified …

  • Critical max 9.1
    RLSA-2026:80605 1 CVE

    Critical: cjose security update

    CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVE-2026-53939) For more details about the security issue(s), i…

  • Medium max 8.2
    RLSA-2026:80514 2 CVEs

    Moderate: compat-openssl11 security update

    The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: heap buf…

  • High max 7.8
    RLSA-2026:80507 2 CVEs

    Important: emacs security update

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to informati…

  • High max 7.8
    RLSA-2026:80506 2 CVEs

    Important: emacs security update

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to informati…

  • High max 8.8
    RLSA-2026:80498 4 CVEs

    Important: flatpak security update

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as r…

  • High max 7.8
    RLSA-2026:80496 1 CVE

    Important: flatpak-builder security update

    Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), includi…

  • High max 7.8
    RLSA-2026:80495 1 CVE

    Important: flatpak-builder security update

    Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), includi…

  • Medium max 7.7
    RLSA-2026:76781 4 CVEs

    Moderate: glibc security, bug fix, and enhancement update

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…

  • High max 9.1
    RLSA-2026:79371 8 CVEs

    Important: dovecot security update

    Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided …

  • Medium max 6.6
    RLSA-2026:79281 6 CVEs

    Moderate: glibc security, bug fix, and enhancement update

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…

  • High max 8.2
    RLSA-2026:79122 1 CVE

    Important: cjose security update

    CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service (CVE-2026-53938) For more details about the security issue(s), in…

  • High max 7.5
    RLSA-2026:79177 1 CVE

    Important: mod_auth_openidc security update

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: De…

  • High max 10.0
    RLSA-2026:77690 16 CVEs

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) …

  • High max 9.8
    RLSA-2026:77689 14 CVEs

    Important: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) …

  • High max 7.5
    RLSA-2026:77648 1 CVE

    Important: dogtag-pki security update

    IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP)…

  • Medium max 7.5
    RLSA-2026:77534 1 CVE

    Moderate: sssd security update

    The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward …

  • High max 8.2
    RLSA-2026:77396 1 CVE

    Important: openssl security update

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: compat-openssl: DTLS Retransmits Handshake Messages…

  • High max 9.2
    RLSA-2026:77021 2 CVEs

    Important: python3.14 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 9.2
    RLSA-2026:77020 2 CVEs

    Important: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 9.2
    RLSA-2026:77018 2 CVEs

    Important: python3.14 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 9.2
    RLSA-2026:77017 2 CVEs

    Important: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 7.5
    RLSA-2026:79162 3 CVEs

    Important: bind security update

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …

  • High max 7.5
    RLSA-2026:79113 3 CVEs

    Important: bind9.16 security, bug fix, and enhancement update

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …

  • Medium max 7.5
    RLSA-2026:78952 1 CVE

    Moderate: tftp security update

    The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provide…

  • Medium max 7.8
    RLSA-2026:78951 1 CVE

    Moderate: kbd security update

    The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fix(es): * kbd: Local privilege escalation in openvt via incorrect process owner verification all…

  • High max 9.8
    RLSA-2026:77500 3 CVEs

    Important: kernel-rt security update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kern…

  • High max 9.8
    RLSA-2026:77498 3 CVEs

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: packet: use consistent hard_header_len in non-ring se…

  • High max 8.2
    RLSA-2026:76918 1 CVE

    Important: openssl security update

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: compat-openssl: DTLS Retransmits Handshake Messages…

  • High max 6.2
    RLSA-2026:76760 1 CVE

    Important: perl-DBI security update

    The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Securit…

  • High max 8.8
    RLSA-2026:76755 6 CVEs

    Important: freerdp security update

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Denial of …

  • High max 8.7
    RLSA-2026:76744 1 CVE

    Important: opentelemetry-collector security update

    Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fix(es): * google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445) For more details about the security is…

  • High max 7.5
    RLSA-2026:76750 2 CVEs

    Important: nodejs:22 security update

    Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) *…

  • High max 6.2
    RLSA-2026:77576 1 CVE

    Important: perl-DBI security update

    The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Securit…

  • High max 8.2
    RLSA-2026:77369 2 CVEs

    Important: mod_auth_openidc:2.3 security update

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: De…

  • High max 7.1
    RLSA-2026:77359 1 CVE

    Important: vim security update

    Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073) For more details about the security issue(s), including the impact, a …