Rocky Linux has published three important errata addressing security vulnerabilities and bugs across its latest releases. The first two updates target Rocky Linux 9 by patching nodejs-packaging, nodemon, and related Node.js modules for both version 24 and version 22. The third announcement covers Rocky Linux 8 and rolls out security fixes for a wide range of container management tools, including Podman, Skopeo, runc, and networking components.

RLSA-2026:35891: Important: nodejs:24 security, bug fix, and enhancement update
RLSA-2026:35892: Important: nodejs:22 security, bug fix, and enhancement update
RLSA-2026:35833: Important: container-tools:rhel8 security update

RLSA-2026:35891: Important: nodejs:24 security, bug fix, and enhancement update

An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:35891: Important: nodejs:24 security, bug fix, and enhancement update

RLSA-2026:35892: Important: nodejs:22 security, bug fix, and enhancement update

An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:35892: Important: nodejs:22 security, bug fix, and enhancement update

RLSA-2026:35833: Important: container-tools:rhel8 security update

An update is available for module.netavark, module.runc, slirp4netns, module.libslirp, criu, module.udica, module.oci-seccomp-bpf-hook, udica, toolbox, netavark, container-selinux, module.python-podman, module.crun, python-podman, module.containers-common, module.conmon, oci-seccomp-bpf-hook, skopeo, module.containernetworking-plugins, module.criu, crun, module.toolbox, containers-common, fuse-overlayfs, conmon, runc, module.aardvark-dns, aardvark-dns, cockpit-podman, module.container-selinux, module.cockpit-podman, containernetworking-plugins, module.slirp4netns, module.fuse-overlayfs, libslirp, module.skopeo.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:35833: Important: container-tools:rhel8 security update