Rocky Linux users need to install multiple security patches across versions eight, nine, and ten. These updates address serious vulnerabilities found in essential software components such as the kernel, nginx, openssh, and various Python or nodejs modules that power many systems today. Most advisories carry an important severity rating, although a handful of moderate warnings exist for tools like rsync and ncurses. Users can review detailed vulnerability ratings from the CVE list by accessing the specific errata links provided in each notice to understand the full scope of the fixes.

RLSA-2026:6470: Important: perl-YAML-Syck security update
RLSA-2026:6439: Important: libpng15 security update
RLSA-2026:6750: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update
RLSA-2026:6907: Important: nginx:1.24 security update
RLSA-2026:6445: Important: libpng12 security update
RLSA-2026:6918: Important: freerdp security update
RLSA-2026:6461: Important: openssh security update
RLSA-2026:6436: Moderate: rsync security update
RLSA-2026:6915: Important: vim security update
RLSA-2026:6631: Important: fontforge security update
RLSA-2026:6388: Important: grafana-pcp security update
RLSA-2026:6817: Important: capstone security update
RLSA-2026:6622: Moderate: crun security update
RLSA-2026:5941: Important: golang security update
RLSA-2026:6342: Important: thunderbird security update
RLSA-2026:6825: Moderate: rsync security update
RLSA-2026:6799: Important: freerdp security update
RLSA-2026:6906: Important: nginx security update
RLSA-2026:6053: Moderate: kernel security update
RLSA-2026:6344: Important: grafana security update
RLSA-2026:6259: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
RLSA-2026:5931: Important: firefox security update
RLSA-2026:5913: Moderate: ncurses security update
RLSA-2026:6766: Important: python3.9 security update
RLSA-2026:7343: Important: nginx:1.26 security update
RLSA-2026:7350: Important: nodejs:24 security update
RLSA-2026:7302: Important: nodejs:22 security update

RLSA-2026:6470: Important: perl-YAML-Syck security update

An update is available for perl-YAML-Syck.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6470: Important: perl-YAML-Syck security update

RLSA-2026:6439: Important: libpng15 security update

An update is available for libpng15.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6439: Important: libpng15 security update

RLSA-2026:6750: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-base.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6750: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update

RLSA-2026:6907: Important: nginx:1.24 security update

An update is available for module.nginx, nginx.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6907: Important: nginx:1.24 security update

RLSA-2026:6445: Important: libpng12 security update

An update is available for libpng12.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6445: Important: libpng12 security update

RLSA-2026:6918: Important: freerdp security update

An update is available for freerdp.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6918: Important: freerdp security update

RLSA-2026:6461: Important: openssh security update

An update is available for openssh.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6461: Important: openssh security update

RLSA-2026:6436: Moderate: rsync security update

An update is available for rsync.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6436: Moderate: rsync security update

RLSA-2026:6915: Important: vim security update

An update is available for vim.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6915: Important: vim security update

RLSA-2026:6631: Important: fontforge security update

An update is available for fontforge.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6631: Important: fontforge security update

RLSA-2026:6388: Important: grafana-pcp security update

An update is available for grafana-pcp.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6388: Important: grafana-pcp security update

RLSA-2026:6817: Important: capstone security update

An update is available for capstone.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6817: Important: capstone security update

RLSA-2026:6622: Moderate: crun security update

An update is available for crun.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6622: Moderate: crun security update

RLSA-2026:5941: Important: golang security update

An update is available for golang.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5941: Important: golang security update

RLSA-2026:6342: Important: thunderbird security update

An update is available for thunderbird.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6342: Important: thunderbird security update

RLSA-2026:6825: Moderate: rsync security update

An update is available for rsync.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6825: Moderate: rsync security update

RLSA-2026:6799: Important: freerdp security update

An update is available for freerdp.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6799: Important: freerdp security update

RLSA-2026:6906: Important: nginx security update

An update is available for nginx.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6906: Important: nginx security update

RLSA-2026:6053: Moderate: kernel security update

An update is available for kernel.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6053: Moderate: kernel security update

RLSA-2026:6344: Important: grafana security update

An update is available for grafana.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6344: Important: grafana security update

RLSA-2026:6259: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

An update is available for gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, gstreamer1-plugins-base.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6259: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

RLSA-2026:5931: Important: firefox security update

An update is available for firefox.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5931: Important: firefox security update

RLSA-2026:5913: Moderate: ncurses security update

An update is available for ncurses.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:5913: Moderate: ncurses security update

RLSA-2026:6766: Important: python3.9 security update

An update is available for python3.9.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:6766: Important: python3.9 security update

RLSA-2026:7343: Important: nginx:1.26 security update

An update is available for module.nginx, nginx.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7343: Important: nginx:1.26 security update

RLSA-2026:7350: Important: nodejs:24 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7350: Important: nodejs:24 security update

RLSA-2026:7302: Important: nodejs:22 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7302: Important: nodejs:22 security update