Rocky Linux 8 and 9 Vulnerabilities Lead to Remote Code Execution Risks

Multiple vulnerabilities have been identified in Rocky Linux affecting both version 8 and 9. Specifically, Rocky Linux 9 is impacted by a remote code execution vulnerability in gegl04 (CVE-2026-62170) and a moderate denial of service issue in libssh (CVE-2026-62217). Rocky Linux 8 also faces moderate denial of service issues in libssh (CVE-2026-62218) and a memory corruption vulnerability in wget (CVE-2026-62144). All vulnerabilities have been assigned CVSS scores indicating their severity, and updates are available for affected packages. Administrators are urged to apply patches promptly to mitigate risks. The vulnerabilities could allow attackers to execute arbitrary code or cause service disruptions. The updates are crucial for maintaining system integrity and security.

Key Points: • Rocky Linux 9 has critical vulnerabilities in gegl04 and libssh requiring immediate patching. • Rocky Linux 8 is affected by similar vulnerabilities in libssh and wget, also needing updates. • All vulnerabilities have CVEs assigned and patches are available for affected systems.