Rocky Linux 9.2 [CIQ] 安全性更新：mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc 多個弱點 （ciqsa-2026_0943）
high Nessus Plugin ID 357196
語言:
概要
Rocky Linux 主機缺少一或多個安全性更新。說明
Rocky Linux 9.2 主機已安裝的套件會受到 CIQ ciqsa-2026_0943 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 9.2中 mysql SRPM 的安全性修正。它解決了 87 個 CVE：
CVE-2022-4899、CVE-2024-20960、CVE-2024-20964、CVE-2024-20972CVE-2024-20983、 和 82 個。
Tenable 已直接從 CIQ 安全性公告中擷取上述描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_0943中的指引更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?030c8229
http://www.nessus.org/u?05fd1aa9
http://www.nessus.org/u?073bb3e2
http://www.nessus.org/u?082f2803
http://www.nessus.org/u?08f1696c
http://www.nessus.org/u?0b3e3315
http://www.nessus.org/u?0ba90634
http://www.nessus.org/u?0f340949
http://www.nessus.org/u?0fd8df9c
http://www.nessus.org/u?1185db5e
http://www.nessus.org/u?1dd773d4
http://www.nessus.org/u?1decd701
http://www.nessus.org/u?21dc1ea2
http://www.nessus.org/u?2332406e
http://www.nessus.org/u?26e393d5
http://www.nessus.org/u?29226b63
http://www.nessus.org/u?2a1645e7
http://www.nessus.org/u?2fbb9a79
http://www.nessus.org/u?3389a81c
http://www.nessus.org/u?35ca6263
http://www.nessus.org/u?3e53ca62
http://www.nessus.org/u?4091a153
http://www.nessus.org/u?45c90b98
http://www.nessus.org/u?479b1d13
http://www.nessus.org/u?47e39f04
http://www.nessus.org/u?48f58074
http://www.nessus.org/u?4c992643
http://www.nessus.org/u?4d56c6dc
http://www.nessus.org/u?4f6f37b7
http://www.nessus.org/u?514ff271
http://www.nessus.org/u?57159717
http://www.nessus.org/u?597f1725
http://www.nessus.org/u?5c70d711
http://www.nessus.org/u?671473a1
http://www.nessus.org/u?692e7367
http://www.nessus.org/u?6f3a6b43
http://www.nessus.org/u?710b7d56
http://www.nessus.org/u?74f404eb
http://www.nessus.org/u?7a3b15f3
http://www.nessus.org/u?8102f29e
http://www.nessus.org/u?82c142e9
http://www.nessus.org/u?83bd9f66
http://www.nessus.org/u?85d40f3e
http://www.nessus.org/u?86a6ef05
http://www.nessus.org/u?88b0cd42
http://www.nessus.org/u?8d4524f1
http://www.nessus.org/u?8f9fb7e4
http://www.nessus.org/u?94366a5f
http://www.nessus.org/u?95974c43
http://www.nessus.org/u?969348c9
http://www.nessus.org/u?98496d51
http://www.nessus.org/u?98678153
http://www.nessus.org/u?9a0ab0f9
http://www.nessus.org/u?9cb8d6f8
http://www.nessus.org/u?9fc85917
http://www.nessus.org/u?a012460b
http://www.nessus.org/u?a59c3d47
http://www.nessus.org/u?a61968ee
http://www.nessus.org/u?a76ff374
http://www.nessus.org/u?a845da41
http://www.nessus.org/u?ab4b38e9
http://www.nessus.org/u?ab98a248
http://www.nessus.org/u?b0a76a30
http://www.nessus.org/u?b1c86dfc
http://www.nessus.org/u?b1fd6b73
http://www.nessus.org/u?b65ff616
http://www.nessus.org/u?b9073653
http://www.nessus.org/u?bb7adab2
http://www.nessus.org/u?bdc12047
http://www.nessus.org/u?c18f1f5c
http://www.nessus.org/u?c42e0307
http://www.nessus.org/u?c909fcea
http://www.nessus.org/u?d0327c4e
http://www.nessus.org/u?d615eb85
http://www.nessus.org/u?dd4814e7
http://www.nessus.org/u?ddf55f43
http://www.nessus.org/u?def48f69
http://www.nessus.org/u?e0ce1c1a
http://www.nessus.org/u?e85e3978
http://www.nessus.org/u?e976f09a
http://www.nessus.org/u?e9f26196
http://www.nessus.org/u?eb78a265
http://www.nessus.org/u?f43925dc
http://www.nessus.org/u?f67c97d7
http://www.nessus.org/u?f79ac5f2
http://www.nessus.org/u?f9f94a90
Plugin 詳細資訊
嚴重性: High
ID: 357196
檔案名稱: ciq_rocky_linux_9_2_ciqsa-2026_0943.nasl
版本: 1.1
類型: Local
已發布: 2026/10/1
已更新: 2026/10/1
支援的感應器: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Medium
分數: 4.9
百分位數: 58.36
Vendor
Vendor Severity: High
CVSS v2
風險因素: High
基本分數: 7.1
時間性分數: 5.3
媒介: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2023-21980
CVSS v3
風險因素: High
基本分數: 7.1
時間性分數: 6.2
媒介: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:U/RL:O/RC:C
弱點資訊
必要的 KB 項目: Host/OS/extended-third-party, Host/local_checks_enabled, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/cpu
可輕鬆利用: No known exploits are available
修補程式發佈日期: 2026/9/1
弱點發布日期: 2022/8/22
參考資訊
CVE: CVE-2022-4899, CVE-2023-21911, CVE-2023-21919, CVE-2023-21920, CVE-2023-21929, CVE-2023-21933, CVE-2023-21935, CVE-2023-21940, CVE-2023-21945, CVE-2023-21946, CVE-2023-21947, CVE-2023-21953, CVE-2023-21955, CVE-2023-21962, CVE-2023-21966, CVE-2023-21972, CVE-2023-21976, CVE-2023-21977, CVE-2023-21980, CVE-2023-21982, CVE-2023-22005, CVE-2023-22007, CVE-2023-22008, CVE-2023-22032, CVE-2023-22033, CVE-2023-22038, CVE-2023-22046, CVE-2023-22048, CVE-2023-22053, CVE-2023-22054, CVE-2023-22056, CVE-2023-22057, CVE-2023-22058, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22066, CVE-2023-22068, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22084, CVE-2023-22092, CVE-2023-22097, CVE-2023-22103, CVE-2023-22104, CVE-2023-22110, CVE-2023-22111, CVE-2023-22112, CVE-2023-22113, CVE-2023-22114, CVE-2023-22115, CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20968, CVE-2024-20969, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982, CVE-2024-20983, CVE-2024-20984, CVE-2024-20985, CVE-2024-20993, CVE-2024-21049, CVE-2024-21050, CVE-2024-21051, CVE-2024-21052, CVE-2024-21053, CVE-2024-21055, CVE-2024-21056, CVE-2024-21057, CVE-2024-21061, CVE-2024-21137, CVE-2024-21200