Several critical security advisories have been issued for Rocky Linux systems running versions eight through ten. The majority of these patches address known vulnerabilities in popular software like vim and firefox, but the pcs tool update carries a moderate severity rating. CVSS scores are available for every entry so you can verify the risk level yourself. Administrators should follow the provided errata links to download these essential fixes before their systems face potential threats.

RLSA-2026:8259: Important: vim security update
RLSA-2026:8093: Moderate: pcs security update
RLSA-2026:8052: Important: firefox security update
RLSA-2026:7667: Important: nghttp2 security update
RLSA-2026:8312: Important: bind security update
RLSA-2026:7682: Important: openexr security update

RLSA-2026:8259: Important: vim security update

An update is available for vim.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8259: Important: vim security update

RLSA-2026:8093: Moderate: pcs security update

An update is available for pcs.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8093: Moderate: pcs security update

RLSA-2026:8052: Important: firefox security update

An update is available for firefox.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8052: Important: firefox security update

RLSA-2026:7667: Important: nghttp2 security update

An update is available for nghttp2.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7667: Important: nghttp2 security update

RLSA-2026:8312: Important: bind security update

An update is available for bind.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:8312: Important: bind security update

RLSA-2026:7682: Important: openexr security update

An update is available for openexr.
This update affects Rocky Linux 10.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7682: Important: openexr security update