Rocky Linux 8 administrators have been notified of two critical security updates that require immediate attention. While one patch fixes issues within the libpng library, the second update affects a wide variety of container tools such as podman and buildah. Detailed severity ratings are available for each vulnerability through the Common Vulnerability Scoring System linked in the documentation.

RLSA-2026:4728: Important: libpng security update
RLSA-2026:4672: Important: container-tools:rhel8 security update

RLSA-2026:4728: Important: libpng security update

An update is available for libpng.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:4728: Important: libpng security update

RLSA-2026:4672: Important: container-tools:rhel8 security update

An update is available for module.skopeo, aardvark-dns, crun, module.udica, module.cockpit-podman, module.criu, conmon, runc, containernetworking-plugins, python-podman, toolbox, module.oci-seccomp-bpf-hook, module.containers-common, podman, module.aardvark-dns, module.libslirp, fuse-overlayfs, module.python-podman, buildah, slirp4netns, module.conmon, module.slirp4netns, criu, module.podman, container-selinux, module.container-selinux, libslirp, module.runc, containers-common, module.netavark, module.containernetworking-plugins, oci-seccomp-bpf-hook, module.crun, udica, skopeo, cockpit-podman, module.buildah, module.toolbox, module.fuse-overlayfs, netavark.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:4672: Important: container-tools:rhel8 security update