Rocky Linux users must address several important security updates for versions 8, 9, and 10. Administrators need to quickly patch critical software packages such as firefox, bind, and vim because the newly discovered vulnerabilities pose significant risks to their systems. Every advisory includes a Common Vulnerability Scoring System base score so you can gauge the severity rating from the CVE list immediately. Full details are available through the official errata links provided in each notification.

RLSA-2026:7992: Important: golang-github-openprinting-ipp-usb security update
RLSA-2026:7711: Important: vim security update
RLSA-2026:8119: Important: squid security update
RLSA-2026:7666: Important: nghttp2 security update
RLSA-2026:7680: Important: perl-XML-Parser security update
RLSA-2026:7675: Important: nodejs24 security update
RLSA-2026:7672: Important: firefox security update
RLSA-2026:7668: Important: nghttp2 security update
RLSA-2026:7671: Important: firefox security update
RLSA-2026:7915: Important: bind9.18 security update
RLSA-2026:8075: Important: bind security update
RLSA-2026:7679: Important: perl-XML-Parser security update
RLSA-2026:8155: Important: bind9.16 security update
RLSA-2026:7896: Important: nodejs:20 security update
RLSA-2026:8339: Important: nodejs:20 security update
RLSA-2026:8317: Important: squid:4 security update

RLSA-2026:7992: Important: golang-github-openprinting-ipp-usb security update

An update is available for golang-github-openprinting-ipp-usb.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7992: Important: golang-github-openprinting-ipp-usb security update

RLSA-2026:7711: Important: vim security update

An update is available for vim.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7711: Important: vim security update

RLSA-2026:8119: Important: squid security update

An update is available for squid.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8119: Important: squid security update

RLSA-2026:7666: Important: nghttp2 security update

An update is available for nghttp2.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7666: Important: nghttp2 security update

RLSA-2026:7680: Important: perl-XML-Parser security update

An update is available for perl-XML-Parser.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7680: Important: perl-XML-Parser security update

RLSA-2026:7675: Important: nodejs24 security update

An update is available for nodejs24.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7675: Important: nodejs24 security update

RLSA-2026:7672: Important: firefox security update

An update is available for firefox.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7672: Important: firefox security update

RLSA-2026:7668: Important: nghttp2 security update

An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7668: Important: nghttp2 security update

RLSA-2026:7671: Important: firefox security update

An update is available for firefox.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7671: Important: firefox security update

RLSA-2026:7915: Important: bind9.18 security update

An update is available for bind9.18.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7915: Important: bind9.18 security update

RLSA-2026:8075: Important: bind security update

An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8075: Important: bind security update

RLSA-2026:7679: Important: perl-XML-Parser security update

An update is available for perl-XML-Parser.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7679: Important: perl-XML-Parser security update

RLSA-2026:8155: Important: bind9.16 security update

An update is available for bind9.16.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8155: Important: bind9.16 security update

RLSA-2026:7896: Important: nodejs:20 security update

An update is available for nodejs, module.nodejs-packaging, nodejs-packaging, module.nodejs, nodejs-nodemon, module.nodejs-nodemon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7896: Important: nodejs:20 security update

RLSA-2026:8339: Important: nodejs:20 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8339: Important: nodejs:20 security update

RLSA-2026:8317: Important: squid:4 security update

An update is available for squid, libecap, module.libecap, module.squid.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8317: Important: squid:4 security update