ocky Linux 8 administrators should apply three new errata packages addressing critical vulnerabilities in webkit2gtk3, glib2, and httpd:2.4. The RLSA-2026:42088 and RLSA-2026:42090 advisories roll out required security patches for the GTK rendering engine and core utility library respectively. A third advisory, RLSA-2026:42828, combines security fixes with bug corrections and performance improvements for Apache HTTP Server modules including mod_http2 and module.mod_md. Each vulnerability carries a Common Vulnerability Scoring System base rating to help system operators prioritize remediation efforts across their infrastructure.

RLSA-2026:42088: Important: webkit2gtk3 security update
RLSA-2026:42090: Important: glib2 security update
RLSA-2026:42828: Important: httpd:2.4 security, bug fix, and enhancement update

RLSA-2026:42088: Important: webkit2gtk3 security update

An update is available for webkit2gtk3.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:42088: Important: webkit2gtk3 security update

RLSA-2026:42090: Important: glib2 security update

An update is available for glib2.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:42090: Important: glib2 security update

RLSA-2026:42828: Important: httpd:2.4 security, bug fix, and enhancement update

An update is available for mod_http2, module.mod_md, module.mod_http2, mod_md, module.httpd, httpd.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:42828: Important: httpd:2.4 security, bug fix, and enhancement update