Rocky Linux 9.2 [CIQ] 安全性更新：mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc 多個弱點 （ciqsa-2026_0461）
critical Nessus Plugin ID 353739
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.2 主機上安裝的多個套件受到 CIQ ciqsa-2026_0461 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 9.2中 mysql SRPM 的安全性修正。它解決了 187 個 CVE：
CVE-2019-2528、CVE-2017-3462、 CVE-2018-3283CVE-2018-2759CVE-2019-2503和 182 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_0461 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?00d530a0
http://www.nessus.org/u?0182ab72
http://www.nessus.org/u?0407dfe0
http://www.nessus.org/u?04c4588b
http://www.nessus.org/u?06a5c642
http://www.nessus.org/u?06a8addb
http://www.nessus.org/u?074e7ea4
http://www.nessus.org/u?07808ff1
http://www.nessus.org/u?09745775
http://www.nessus.org/u?0a1d8869
http://www.nessus.org/u?0af4a813
http://www.nessus.org/u?0bb391c2
http://www.nessus.org/u?0c3dcb08
http://www.nessus.org/u?0d21fe0c
http://www.nessus.org/u?0ece9be8
http://www.nessus.org/u?0ed051f5
http://www.nessus.org/u?1058e5d7
http://www.nessus.org/u?115f6dc3
http://www.nessus.org/u?1275f566
http://www.nessus.org/u?12cce3cc
http://www.nessus.org/u?16a0b13b
http://www.nessus.org/u?17cf846e
http://www.nessus.org/u?17d34cad
http://www.nessus.org/u?18338854
http://www.nessus.org/u?19c44a93
http://www.nessus.org/u?1cabeab0
http://www.nessus.org/u?1d099474
http://www.nessus.org/u?2011ff6b
http://www.nessus.org/u?22674bd1
http://www.nessus.org/u?23479f48
http://www.nessus.org/u?24cc4561
http://www.nessus.org/u?25993519
http://www.nessus.org/u?279ba7ff
http://www.nessus.org/u?27fddc9e
http://www.nessus.org/u?28483842
http://www.nessus.org/u?2e22f29a
http://www.nessus.org/u?2eec0d3f
http://www.nessus.org/u?34b8e8b5
http://www.nessus.org/u?34cb7b14
http://www.nessus.org/u?3657a2b8
http://www.nessus.org/u?366d6509
http://www.nessus.org/u?3721b53c
http://www.nessus.org/u?3b5c291b
http://www.nessus.org/u?3be26da4
http://www.nessus.org/u?3c93a76e
http://www.nessus.org/u?3e5560c5
http://www.nessus.org/u?3e85bdc1
http://www.nessus.org/u?3f5d45a9
http://www.nessus.org/u?4278ba6d
http://www.nessus.org/u?43df70f3
http://www.nessus.org/u?441f99bc
http://www.nessus.org/u?4440ea10
http://www.nessus.org/u?45501d15
http://www.nessus.org/u?47455d01
http://www.nessus.org/u?477ed5ae
http://www.nessus.org/u?49dbd3cd
http://www.nessus.org/u?4be50804
http://www.nessus.org/u?518a6df9
http://www.nessus.org/u?529c4c81
http://www.nessus.org/u?5459d2a4
http://www.nessus.org/u?54cfcc65
http://www.nessus.org/u?55dff035
http://www.nessus.org/u?5638501d
http://www.nessus.org/u?57129b88
http://www.nessus.org/u?57c9e4e3
http://www.nessus.org/u?58248565
http://www.nessus.org/u?59ea8214
http://www.nessus.org/u?5b34a1c3
http://www.nessus.org/u?5cdb6d06
http://www.nessus.org/u?5e4cce0b
http://www.nessus.org/u?5f0e8480
http://www.nessus.org/u?5f1b75f5
http://www.nessus.org/u?5f4b5aed
http://www.nessus.org/u?5fd26f3e
http://www.nessus.org/u?5fdf3e08
http://www.nessus.org/u?5ff42d7b
http://www.nessus.org/u?60d1bb6f
http://www.nessus.org/u?617970e4
http://www.nessus.org/u?62068932
http://www.nessus.org/u?6234ed9a
http://www.nessus.org/u?62b29d56
http://www.nessus.org/u?638aeda4
http://www.nessus.org/u?64709022
http://www.nessus.org/u?66d9d1ce
http://www.nessus.org/u?6938fa9b
http://www.nessus.org/u?6fbf9f85
http://www.nessus.org/u?718485e4
http://www.nessus.org/u?72789791
http://www.nessus.org/u?751e5d66
http://www.nessus.org/u?7588d632
http://www.nessus.org/u?76b047dc
http://www.nessus.org/u?76b3aa3b
http://www.nessus.org/u?79f2c0b0
http://www.nessus.org/u?7ad0219c
http://www.nessus.org/u?7b22ecef
http://www.nessus.org/u?7b2aaf6d
http://www.nessus.org/u?7be4934e
http://www.nessus.org/u?7bfb0582
http://www.nessus.org/u?7c0d61b8
http://www.nessus.org/u?7ca669bf
http://www.nessus.org/u?7ea5a8ad
http://www.nessus.org/u?80406901
http://www.nessus.org/u?82208fca
http://www.nessus.org/u?84329c72
http://www.nessus.org/u?846636e7
http://www.nessus.org/u?84c759c4
http://www.nessus.org/u?85364c38
http://www.nessus.org/u?8b040696
http://www.nessus.org/u?8b6cc4d8
http://www.nessus.org/u?8cd9aa50
http://www.nessus.org/u?8ef42121
http://www.nessus.org/u?8f5928f4
http://www.nessus.org/u?9231adcb
http://www.nessus.org/u?92858fa7
http://www.nessus.org/u?9336e371
http://www.nessus.org/u?9355814e
http://www.nessus.org/u?939de42c
http://www.nessus.org/u?94af2276
http://www.nessus.org/u?95ad11c7
http://www.nessus.org/u?96527bbf
http://www.nessus.org/u?96e8d927
http://www.nessus.org/u?96f71465
http://www.nessus.org/u?9aa64a0a
http://www.nessus.org/u?9dfc26ad
http://www.nessus.org/u?a22319b6
http://www.nessus.org/u?a36da9fb
http://www.nessus.org/u?a4e37374
http://www.nessus.org/u?a4f85339
http://www.nessus.org/u?a5d21e83
http://www.nessus.org/u?a7305115
http://www.nessus.org/u?aa0977fc
http://www.nessus.org/u?aa3e9611
http://www.nessus.org/u?b04faeb8
http://www.nessus.org/u?b11b9ddb
http://www.nessus.org/u?b138892d
http://www.nessus.org/u?b1d085f2
http://www.nessus.org/u?b32ccad8
http://www.nessus.org/u?b3474b53
http://www.nessus.org/u?b4186f0f
http://www.nessus.org/u?b4c6361b
http://www.nessus.org/u?b6f3407d
http://www.nessus.org/u?b71358bc
http://www.nessus.org/u?b79905cd
http://www.nessus.org/u?b7b7eba4
http://www.nessus.org/u?b85e0c42
http://www.nessus.org/u?ba164f91
http://www.nessus.org/u?ba8ee7b8
http://www.nessus.org/u?bb1e13fc
http://www.nessus.org/u?be13c605
http://www.nessus.org/u?be2fe4d4
http://www.nessus.org/u?be527755
http://www.nessus.org/u?c014b63f
http://www.nessus.org/u?c3185aab
http://www.nessus.org/u?c5525dd1
http://www.nessus.org/u?c64e91bf
http://www.nessus.org/u?c6f85108
http://www.nessus.org/u?c7e4d29e
http://www.nessus.org/u?caa16a8d
http://www.nessus.org/u?cd445053
http://www.nessus.org/u?ce13a87f
http://www.nessus.org/u?cf7d5e38
http://www.nessus.org/u?d243b777
http://www.nessus.org/u?d42dc4d4
http://www.nessus.org/u?d81d88e3
http://www.nessus.org/u?d968b516
http://www.nessus.org/u?d98e7f2f
http://www.nessus.org/u?db8ea313
http://www.nessus.org/u?dbf8297a
http://www.nessus.org/u?de89ff14
http://www.nessus.org/u?de8a4dbf
http://www.nessus.org/u?e4193501
http://www.nessus.org/u?e67911ba
http://www.nessus.org/u?e76e9778
http://www.nessus.org/u?e99017ce
http://www.nessus.org/u?e9956b29
http://www.nessus.org/u?e9ea326a
http://www.nessus.org/u?ec57af62
http://www.nessus.org/u?ee8247c3
http://www.nessus.org/u?ef048862
http://www.nessus.org/u?f1b44a07
http://www.nessus.org/u?f1d9958c
http://www.nessus.org/u?f28c5ee8
http://www.nessus.org/u?f458c0e1
http://www.nessus.org/u?f4fe5379
http://www.nessus.org/u?fa11c42b
http://www.nessus.org/u?fb1b02ea
Plugin 詳細資訊
嚴重性: Critical
ID: 353739
檔案名稱: ciq_rocky_linux_9_2_ciqsa-2026_0461.nasl
版本: 1.3
類型: Local
已發布: 2026/10/1
已更新: 2026/10/13
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: High
分數: 7.9
百分位數: 99.37
Vendor
Vendor Severity: High
CVSS v2
風險因素: High
基本分數: 7.5
時間性分數: 6.2
媒介: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 評分資料來源: CVE-2014-0001
CVSS v3
風險因素: Critical
基本分數: 9.1
時間性分數: 8.4
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
時間媒介: CVSS:3.0/E:F/RL:O/RC:C
CVSS 評分資料來源: CVE-2024-37371
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/1
弱點發布日期: 2023/12/12
可惡意利用
CANVAS (White_Phosphorus)
Core Impact
參考資訊
CVE: CVE-2006-2753, CVE-2006-4031, CVE-2006-4226, CVE-2006-4227, CVE-2007-5925, CVE-2007-5969, CVE-2007-6303, CVE-2008-7247, CVE-2009-4019, CVE-2010-1848, CVE-2010-1849, CVE-2010-1850, CVE-2010-2008, CVE-2012-2122, CVE-2012-5611, CVE-2013-1861, CVE-2014-0001, CVE-2017-10155, CVE-2017-10227, CVE-2017-10268, CVE-2017-10276, CVE-2017-10279, CVE-2017-10283, CVE-2017-10286, CVE-2017-10294, CVE-2017-10314, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3329, CVE-2017-3450, CVE-2017-3453, CVE-2017-3456, CVE-2017-3461, CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3599, CVE-2017-3600, CVE-2017-3633, CVE-2017-3634, CVE-2017-3635, CVE-2017-3641, CVE-2017-3647, CVE-2017-3648, CVE-2017-3649, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653, CVE-2018-2755, CVE-2018-2758, CVE-2018-2759, CVE-2018-2761, CVE-2018-2762, CVE-2018-2766, CVE-2018-2769, CVE-2018-2771, CVE-2018-2773, CVE-2018-2775, CVE-2018-2776, CVE-2018-2777, CVE-2018-2778, CVE-2018-2779, CVE-2018-2780, CVE-2018-2781, CVE-2018-2782, CVE-2018-2784, CVE-2018-2786, CVE-2018-2787, CVE-2018-2810, CVE-2018-2812, CVE-2018-2813, CVE-2018-2816, CVE-2018-2817, CVE-2018-2818, CVE-2018-2819, CVE-2018-2839, CVE-2018-2846, CVE-2018-3133, CVE-2018-3137, CVE-2018-3143, CVE-2018-3144, CVE-2018-3145, CVE-2018-3155, CVE-2018-3156, CVE-2018-3161, CVE-2018-3162, CVE-2018-3170, CVE-2018-3171, CVE-2018-3173, CVE-2018-3174, CVE-2018-3182, CVE-2018-3185, CVE-2018-3186, CVE-2018-3187, CVE-2018-3195, CVE-2018-3200, CVE-2018-3203, CVE-2018-3212, CVE-2018-3247, CVE-2018-3251, CVE-2018-3276, CVE-2018-3277, CVE-2018-3278, CVE-2018-3279, CVE-2018-3280, CVE-2018-3282, CVE-2018-3283, CVE-2018-3284, CVE-2018-3285, CVE-2018-3286, CVE-2019-2420, CVE-2019-2434, CVE-2019-2436, CVE-2019-2455, CVE-2019-2481, CVE-2019-2482, CVE-2019-2486, CVE-2019-2494, CVE-2019-2495, CVE-2019-2502, CVE-2019-2503, CVE-2019-2507, CVE-2019-2510, CVE-2019-2528, CVE-2019-2529, CVE-2019-2530, CVE-2019-2531, CVE-2019-2532, CVE-2019-2533, CVE-2019-2534, CVE-2019-2535, CVE-2019-2536, CVE-2019-2537, CVE-2019-2539, CVE-2024-11053, CVE-2024-21193, CVE-2024-21194, CVE-2024-21196, CVE-2024-21197, CVE-2024-21198, CVE-2024-21199, CVE-2024-21201, CVE-2024-21203, CVE-2024-21212, CVE-2024-21213, CVE-2024-21218, CVE-2024-21219, CVE-2024-21230, CVE-2024-21231, CVE-2024-21236, CVE-2024-21237, CVE-2024-21238, CVE-2024-21239, CVE-2024-21241, CVE-2024-21247, CVE-2024-37371, CVE-2024-5535, CVE-2024-7264, CVE-2025-21490, CVE-2025-21491, CVE-2025-21494, CVE-2025-21497, CVE-2025-21500, CVE-2025-21501, CVE-2025-21503, CVE-2025-21504, CVE-2025-21505, CVE-2025-21518, CVE-2025-21519, CVE-2025-21520, CVE-2025-21521, CVE-2025-21522, CVE-2025-21523, CVE-2025-21525, CVE-2025-21529, CVE-2025-21531, CVE-2025-21534, CVE-2025-21536, CVE-2025-21540, CVE-2025-21543, CVE-2025-21546, CVE-2025-21555, CVE-2025-21559