Rocky Linux issued 13 security advisories in the 2026 cycle covering the kernel, .NET runtime, BIND DNS, freerdp, dracut, nghttp2, and gnome-remote-desktop for Rocky Linux versions 8, 9, and 10. Updates marked Important target core infrastructure components such as the kernel, BIND, dracut, and .NET releases across Rocky Linux 9 and 10, while moderate fixes address nghttp2 and gnome-remote-desktop on Rocky Linux 9 and 10. Each advisory includes a Common Vulnerability Scoring System base score and links to the Rocky Linux errata page for full CVE transparency and installation instructions.

RLSA-2026:54485: Important: freerdp security update
RLSA-2026:54509: Important: bind9.16 security update
RLSA-2026:54538: Important: .NET 8.0 security, bug fix, and enhancement update
RLSA-2026:54590: Important: .NET 9.0 security, bug fix, and enhancement update
RLSA-2026:54650: Moderate: nghttp2 security update
RLSA-2026:54541: Important: .NET 8.0 security, bug fix, and enhancement update
RLSA-2026:54576: Important: dracut security update
RLSA-2026:54512: Moderate: gnome-remote-desktop security update
RLSA-2026:54662: Moderate: nghttp2 security update
RLSA-2026:54510: Important: bind security update
RLSA-2026:54443: Important: kernel security, bug fix, and enhancement update
RLSA-2026:54487: Important: freerdp security update
RLSA-2026:54571: Important: dracut security update

RLSA-2026:54485: Important: freerdp security update

An update is available for freerdp.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54485: Important: freerdp security update

RLSA-2026:54509: Important: bind9.16 security update

An update is available for bind9.16.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54509: Important: bind9.16 security update

RLSA-2026:54538: Important: .NET 8.0 security, bug fix, and enhancement update

An update is available for dotnet8.0.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54538: Important: .NET 8.0 security, bug fix, and enhancement update

RLSA-2026:54590: Important: .NET 9.0 security, bug fix, and enhancement update

An update is available for dotnet9.0.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54590: Important: .NET 9.0 security, bug fix, and enhancement update

RLSA-2026:54650: Moderate: nghttp2 security update

An update is available for nghttp2.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54650: Moderate: nghttp2 security update

RLSA-2026:54541: Important: .NET 8.0 security, bug fix, and enhancement update

An update is available for dotnet8.0.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54541: Important: .NET 8.0 security, bug fix, and enhancement update

RLSA-2026:54576: Important: dracut security update

An update is available for dracut.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54576: Important: dracut security update

RLSA-2026:54512: Moderate: gnome-remote-desktop security update

An update is available for gnome-remote-desktop.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54512: Moderate: gnome-remote-desktop security update

RLSA-2026:54662: Moderate: nghttp2 security update

An update is available for nghttp2.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54662: Moderate: nghttp2 security update

RLSA-2026:54510: Important: bind security update

An update is available for bind.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54510: Important: bind security update

RLSA-2026:54443: Important: kernel security, bug fix, and enhancement update

An update is available for kernel.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54443: Important: kernel security, bug fix, and enhancement update

RLSA-2026:54487: Important: freerdp security update

An update is available for freerdp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54487: Important: freerdp security update

RLSA-2026:54571: Important: dracut security update

An update is available for dracut.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:54571: Important: dracut security update