Rocky Linux 9 administrators must apply several new security patches to protect their systems from known vulnerabilities. While most of these advisories are marked as important for critical software like Firefox and Python, some moderate updates also exist for utilities such as Vim. Detailed scoring metrics from the Common Vulnerability Scoring System accompany every notice to guide urgency levels. You can find the full details regarding the specific CVEs by visiting the linked errata pages for each package update.

RLSA-2026:5603: Moderate: opencryptoki security update
RLSA-2026:6301: Important: squid security update
RLSA-2026:6300: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
RLSA-2026:6188: Important: thunderbird security update
RLSA-2026:6285: Important: python3.12 security update
RLSA-2026:6340: Important: freerdp security update
RLSA-2026:5602: Moderate: vim security update
RLSA-2026:6390: Moderate: rsync security update
RLSA-2026:5942: Important: golang security update
RLSA-2026:5930: Important: firefox security update
RLSA-2026:6266: Moderate: libxslt security update
RLSA-2026:6286: Important: python3.11 security update
RLSA-2026:6382: Important: grafana security update
RLSA-2026:6383: Important: grafana-pcp security update
RLSA-2026:6923: Important: nginx:1.24 security update

RLSA-2026:5603: Moderate: opencryptoki security update

An update is available for opencryptoki.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5603: Moderate: opencryptoki security update

RLSA-2026:6301: Important: squid security update

An update is available for squid.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6301: Important: squid security update

RLSA-2026:6300: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

An update is available for gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, gstreamer1-plugins-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6300: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

RLSA-2026:6188: Important: thunderbird security update

An update is available for thunderbird.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6188: Important: thunderbird security update

RLSA-2026:6285: Important: python3.12 security update

An update is available for python3.12.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6285: Important: python3.12 security update

RLSA-2026:6340: Important: freerdp security update

An update is available for freerdp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6340: Important: freerdp security update

RLSA-2026:5602: Moderate: vim security update

An update is available for vim.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5602: Moderate: vim security update

RLSA-2026:6390: Moderate: rsync security update

An update is available for rsync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6390: Moderate: rsync security update

RLSA-2026:5942: Important: golang security update

An update is available for golang.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5942: Important: golang security update

RLSA-2026:5930: Important: firefox security update

An update is available for firefox.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5930: Important: firefox security update

RLSA-2026:6266: Moderate: libxslt security update

An update is available for libxslt.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6266: Moderate: libxslt security update

RLSA-2026:6286: Important: python3.11 security update

An update is available for python3.11.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6286: Important: python3.11 security update

RLSA-2026:6382: Important: grafana security update

An update is available for grafana.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6382: Important: grafana security update

RLSA-2026:6383: Important: grafana-pcp security update

An update is available for grafana-pcp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6383: Important: grafana-pcp security update

RLSA-2026:6923: Important: nginx:1.24 security update

An update is available for module.nginx, nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6923: Important: nginx:1.24 security update