Linuxsecurity Rocky Linux 8 and 9 Vulnerabilities Lead to Remote Code Execution Risks
Article Content
- •Rocky Linux 9 has critical vulnerabilities in gegl04 and libssh requiring immediate patching.
- •Rocky Linux 8 is affected by similar vulnerabilities in libssh and wget, also needing updates.
- •All vulnerabilities have CVEs assigned and patches are available for affected systems.
Multiple vulnerabilities have been identified in Rocky Linux affecting both version 8 and 9. Specifically, Rocky Linux 9 is impacted by a remote code execution vulnerability in gegl04 (CVE-2026-62170) and a moderate denial of service issue in libssh (CVE-2026-62217). Rocky Linux 8 also faces moderate denial of service issues in libssh (CVE-2026-62218) and a memory corruption vulnerability in wget (CVE-2026-62144). All vulnerabilities have been assigned CVSS scores indicating their severity, and updates are available for affected packages. Administrators are urged to apply patches promptly to mitigate risks. The vulnerabilities could allow attackers to execute arbitrary code or cause service disruptions. The updates are crucial for maintaining system integrity and security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (15)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…