Rocky Linux 9.6 [CIQ] 安全性更新：curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal 多個弱點 （ciqsa-2026_1401）
critical Nessus Plugin ID 353701
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_1401 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 9.6中 curl SRPM 的安全修正。它解決了 148 個 CVE：
CVE-2023-32001、CVE-2022-27775、 CVE-2018-1000005CVE-2022-27774CVE-2022-32221和 143 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_1401 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?009302b8
http://www.nessus.org/u?017d48a7
http://www.nessus.org/u?026db809
http://www.nessus.org/u?02b239b1
http://www.nessus.org/u?02d740fe
http://www.nessus.org/u?06755d55
http://www.nessus.org/u?09235a9b
http://www.nessus.org/u?0b900e14
http://www.nessus.org/u?0e043f9d
http://www.nessus.org/u?0f78a928
http://www.nessus.org/u?13ce4b12
http://www.nessus.org/u?14c9ac38
http://www.nessus.org/u?14f520c4
http://www.nessus.org/u?15c8d0fd
http://www.nessus.org/u?1650e0e4
http://www.nessus.org/u?19effdcc
http://www.nessus.org/u?1f8161ab
http://www.nessus.org/u?20fadd32
http://www.nessus.org/u?24ea9f60
http://www.nessus.org/u?25eec113
http://www.nessus.org/u?277cedfa
http://www.nessus.org/u?2b0e7b37
http://www.nessus.org/u?2be31abb
http://www.nessus.org/u?314adc31
http://www.nessus.org/u?32ad91f3
http://www.nessus.org/u?33ce97e2
http://www.nessus.org/u?3487283f
http://www.nessus.org/u?34c6e33f
http://www.nessus.org/u?34d45b15
http://www.nessus.org/u?35e222c5
http://www.nessus.org/u?377c9e6d
http://www.nessus.org/u?3d24b8a1
http://www.nessus.org/u?3f363e7e
http://www.nessus.org/u?3f4dcae5
http://www.nessus.org/u?3f6ead56
http://www.nessus.org/u?40dfe940
http://www.nessus.org/u?41d7ab03
http://www.nessus.org/u?43009add
http://www.nessus.org/u?433404d9
http://www.nessus.org/u?449cd879
http://www.nessus.org/u?477ed5ae
http://www.nessus.org/u?48844f28
http://www.nessus.org/u?4eaecc36
http://www.nessus.org/u?51025c0b
http://www.nessus.org/u?53aa7278
http://www.nessus.org/u?53c0b366
http://www.nessus.org/u?540ccebf
http://www.nessus.org/u?563424d1
http://www.nessus.org/u?59da32eb
http://www.nessus.org/u?5a3b9568
http://www.nessus.org/u?5b3d8cdf
http://www.nessus.org/u?5b946e2a
http://www.nessus.org/u?5e77fe41
http://www.nessus.org/u?5f441b11
http://www.nessus.org/u?5fbf0639
http://www.nessus.org/u?639f571b
http://www.nessus.org/u?65f1ca22
http://www.nessus.org/u?68368f67
http://www.nessus.org/u?68e04471
http://www.nessus.org/u?6d646a43
http://www.nessus.org/u?6e5b7a2f
http://www.nessus.org/u?6ef2acf5
http://www.nessus.org/u?6f4b3cf2
http://www.nessus.org/u?729f8bfa
http://www.nessus.org/u?72f73bd5
http://www.nessus.org/u?74e4172a
http://www.nessus.org/u?7777a86b
http://www.nessus.org/u?78d5aba7
http://www.nessus.org/u?798aa7e8
http://www.nessus.org/u?7da64e4c
http://www.nessus.org/u?80b46e40
http://www.nessus.org/u?8343232a
http://www.nessus.org/u?8425f1e7
http://www.nessus.org/u?84af819d
http://www.nessus.org/u?8ec41f21
http://www.nessus.org/u?8f554f5f
http://www.nessus.org/u?8fc108b2
http://www.nessus.org/u?90d14d9d
http://www.nessus.org/u?91484365
http://www.nessus.org/u?94760122
http://www.nessus.org/u?94f3ddab
http://www.nessus.org/u?958eae6d
http://www.nessus.org/u?963f8094
http://www.nessus.org/u?98243499
http://www.nessus.org/u?9c8a411f
http://www.nessus.org/u?9e402e53
http://www.nessus.org/u?9f54c625
http://www.nessus.org/u?a0146f37
http://www.nessus.org/u?a0e35f66
http://www.nessus.org/u?a6d7f954
http://www.nessus.org/u?a80f586f
http://www.nessus.org/u?a8425971
http://www.nessus.org/u?a887c137
http://www.nessus.org/u?aea2ed13
http://www.nessus.org/u?aec14dc9
http://www.nessus.org/u?af37e815
http://www.nessus.org/u?b1451243
http://www.nessus.org/u?b24d4522
http://www.nessus.org/u?b36b5259
http://www.nessus.org/u?b36ee460
http://www.nessus.org/u?b50f1cb2
http://www.nessus.org/u?b5570db0
http://www.nessus.org/u?b796525e
http://www.nessus.org/u?b99150d9
http://www.nessus.org/u?b99ab886
http://www.nessus.org/u?bd1af5ae
http://www.nessus.org/u?bd9a5a0f
http://www.nessus.org/u?be1a774a
http://www.nessus.org/u?bfeae736
http://www.nessus.org/u?c14848f4
http://www.nessus.org/u?c1856222
http://www.nessus.org/u?c5642492
http://www.nessus.org/u?c7c34b76
http://www.nessus.org/u?c92b1fa0
http://www.nessus.org/u?c9e7bc87
http://www.nessus.org/u?cb36a589
http://www.nessus.org/u?cc12f75e
http://www.nessus.org/u?cc57ffbd
http://www.nessus.org/u?ccc74778
http://www.nessus.org/u?ccc810cd
http://www.nessus.org/u?cddf3a8e
http://www.nessus.org/u?cf449b90
http://www.nessus.org/u?cfac2449
http://www.nessus.org/u?d0a5723d
http://www.nessus.org/u?d75b88a7
http://www.nessus.org/u?d7f2c384
http://www.nessus.org/u?d8259ab8
http://www.nessus.org/u?dca9fb53
http://www.nessus.org/u?de1e62a5
http://www.nessus.org/u?de8484f2
http://www.nessus.org/u?dec511ee
http://www.nessus.org/u?e19787f4
http://www.nessus.org/u?e56aa124
http://www.nessus.org/u?e64f1554
http://www.nessus.org/u?e696bc84
http://www.nessus.org/u?e7ee2d53
http://www.nessus.org/u?ed30d3cf
http://www.nessus.org/u?ee00c510
http://www.nessus.org/u?f2cb7c22
http://www.nessus.org/u?f364eaea
http://www.nessus.org/u?f39f1d33
http://www.nessus.org/u?f41d6a22
http://www.nessus.org/u?f55916aa
http://www.nessus.org/u?f76c9cce
http://www.nessus.org/u?fb352988
http://www.nessus.org/u?fc61f5c3
http://www.nessus.org/u?fe4d5c4b
Plugin 詳細資訊
嚴重性: Critical
ID: 353701
檔案名稱: ciq_rocky_linux_9_6_ciqsa-2026_1401.nasl
版本: 1.4
類型: Local
已發布: 2026/10/1
已更新: 2026/10/13
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Critical
分數: 9.4
百分位數: 99.83
Vendor
Vendor Severity: Critical
CVSS v2
風險因素: Critical
基本分數: 10
時間性分數: 8.7
媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2018-14618
CVSS v3
風險因素: Critical
基本分數: 9.8
時間性分數: 9.4
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:H/RL:O/RC:C
CVSS 評分資料來源: CVE-2023-38545
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/2
弱點發布日期: 2023/5/18
參考資訊
CVE: CVE-2013-0249, CVE-2013-1944, CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-3613, CVE-2014-3620, CVE-2014-3707, CVE-2014-8150, CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236, CVE-2015-3237, CVE-2016-0755, CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586, CVE-2017-1000099, CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-2629, CVE-2017-7407, CVE-2017-7468, CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, CVE-2018-0500, CVE-2018-1000005, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000300, CVE-2018-1000301, CVE-2018-14618, CVE-2018-16839, CVE-2018-16840, CVE-2018-16842, CVE-2018-16890, CVE-2018-20483, CVE-2019-3822, CVE-2019-3823, CVE-2019-5435, CVE-2019-5436, CVE-2019-5481, CVE-2019-5482, CVE-2020-8169, CVE-2020-8177, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2021-22876, CVE-2021-22890, CVE-2021-22898, CVE-2021-22901, CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22945, CVE-2021-22946, CVE-2021-22947, CVE-2022-22576, CVE-2022-27774, CVE-2022-27775, CVE-2022-27776, CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208, CVE-2022-32221, CVE-2022-35252, CVE-2022-35260, CVE-2022-42915, CVE-2022-42916, CVE-2022-43551, CVE-2022-43552, CVE-2023-23914, CVE-2023-23915, CVE-2023-23916, CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538, CVE-2023-28321, CVE-2023-28322, CVE-2023-32001, CVE-2023-38039, CVE-2023-38545, CVE-2023-38546, CVE-2023-46218, CVE-2023-46219, CVE-2024-0853, CVE-2024-11053, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-6197, CVE-2024-6874, CVE-2024-8096, CVE-2024-9681, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-10966, CVE-2025-14017, CVE-2025-14524, CVE-2025-15079, CVE-2025-15224, CVE-2025-4947, CVE-2025-5025, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168