Rocky Linux recently pushed out a fresh wave of security advisories that cover both the eighth and ninth major releases. These patches fix known flaws in widely used tools like OpenSSL, PostgreSQL, Redis, and WebKit2GTK while attaching specific CVSS scores to help users gauge risk levels. You will want to check the official CVE records before rolling these changes out across your servers. Getting them installed quickly is really the best way to keep your infrastructure safe from active threats.

RLSA-2026:26348: Moderate: libpng12 security update
RLSA-2026:26008: Important: redis:6 security update
RLSA-2026:25918: Important: webkit2gtk3 security update
RLSA-2026:26335: Important: hplip security update
RLSA-2026:26347: Moderate: libpng15 security update
RLSA-2026:26275: Important: openssl security update
RLSA-2026:26352: Moderate: opencryptoki security update
RLSA-2026:26408: Important: rsync security update
RLSA-2026:26355: Moderate: libxslt security update
RLSA-2026:26354: Low: libxml2 security update
RLSA-2026:25932: Important: postfix security update
RLSA-2026:26181: Important: postgresql:15 security update
RLSA-2026:26180: Moderate: mysql:8.4 security update
RLSA-2026:26447: Important: podman security update
RLSA-2026:25925: Important: valkey security update
RLSA-2026:26323: Important: tomcat security update
RLSA-2026:26205: Important: postfix security update
RLSA-2026:26410: Important: rsync security update
RLSA-2026:25927: Important: webkit2gtk3 security update
RLSA-2026:26297: Important: hplip security update
RLSA-2026:26206: Important: fence-agents security update
RLSA-2026:26204: Important: postgresql:18 security update
RLSA-2026:26455: Important: 389-ds-base security, bug fix, and enhancement update

RLSA-2026:26348: Moderate: libpng12 security update

An update is available for libpng12.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26348: Moderate: libpng12 security update

RLSA-2026:26008: Important: redis:6 security update

An update is available for redis, module.redis.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26008: Important: redis:6 security update

RLSA-2026:25918: Important: webkit2gtk3 security update

An update is available for webkit2gtk3.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:25918: Important: webkit2gtk3 security update

RLSA-2026:26335: Important: hplip security update

An update is available for hplip.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26335: Important: hplip security update

RLSA-2026:26347: Moderate: libpng15 security update

An update is available for libpng15.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26347: Moderate: libpng15 security update

RLSA-2026:26275: Important: openssl security update

An update is available for openssl.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26275: Important: openssl security update

RLSA-2026:26352: Moderate: opencryptoki security update

An update is available for opencryptoki.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26352: Moderate: opencryptoki security update

RLSA-2026:26408: Important: rsync security update

An update is available for rsync.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26408: Important: rsync security update

RLSA-2026:26355: Moderate: libxslt security update

An update is available for libxslt.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26355: Moderate: libxslt security update

RLSA-2026:26354: Low: libxml2 security update

An update is available for libxml2.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26354: Low: libxml2 security update

RLSA-2026:25932: Important: postfix security update

An update is available for postfix.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:25932: Important: postfix security update

RLSA-2026:26181: Important: postgresql:15 security update

An update is available for postgres-decoderbufs, module.postgres-decoderbufs, postgresql, module.pgaudit, module.pg_repack, pgaudit, pg_repack, module.postgresql.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26181: Important: postgresql:15 security update

RLSA-2026:26180: Moderate: mysql:8.4 security update

An update is available for module.mysql, module.mecab, module.mecab-ipadic, mysql, mecab-ipadic, mecab.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26180: Moderate: mysql:8.4 security update

RLSA-2026:26447: Important: podman security update

An update is available for podman.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26447: Important: podman security update

RLSA-2026:25925: Important: valkey security update

An update is available for valkey.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:25925: Important: valkey security update

RLSA-2026:26323: Important: tomcat security update

An update is available for tomcat.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26323: Important: tomcat security update

RLSA-2026:26205: Important: postfix security update

An update is available for postfix.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26205: Important: postfix security update

RLSA-2026:26410: Important: rsync security update

An update is available for rsync.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26410: Important: rsync security update

RLSA-2026:25927: Important: webkit2gtk3 security update

An update is available for webkit2gtk3.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:25927: Important: webkit2gtk3 security update

RLSA-2026:26297: Important: hplip security update

An update is available for hplip.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26297: Important: hplip security update

RLSA-2026:26206: Important: fence-agents security update

An update is available for fence-agents.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26206: Important: fence-agents security update

RLSA-2026:26204: Important: postgresql:18 security update

An update is available for module.pgvector, postgres-decoderbufs, module.postgres-decoderbufs, pgvector, postgresql, module.pgaudit, module.pg_repack, pgaudit, pg_repack, module.postgis, module.postgresql, postgis.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26204: Important: postgresql:18 security update

RLSA-2026:26455: Important: 389-ds-base security, bug fix, and enhancement update

An update is available for 389-ds-base.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:26455: Important: 389-ds-base security, bug fix, and enhancement update