Rocky Linux 8.6 [CIQ] 安全性更新：curl / curl-debuginfo / curl-debugsource / curl-minimal / etc 多個弱點 （ciqsa-2026_0030）
critical Nessus Plugin ID 359305
語言:
概要
Rocky Linux 主機缺少一或多個安全性更新。說明
Rocky Linux 8.6 主機已安裝的套件會受到 CIQ ciqsa-2026_0030 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 8.6中 curl SRPM 的安全修正。它解決了 4 個 CVE：
CVE-2023-38546、CVE-2023-46218、CVE-2023-28322、CVE-2024-2398。
Tenable 已直接從 CIQ 安全性公告中擷取上述描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_0030中的指引更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?009302b8
http://www.nessus.org/u?017d48a7
http://www.nessus.org/u?026db809
http://www.nessus.org/u?02d740fe
http://www.nessus.org/u?06755d55
http://www.nessus.org/u?0b900e14
http://www.nessus.org/u?0e043f9d
http://www.nessus.org/u?0f78a928
http://www.nessus.org/u?13ce4b12
http://www.nessus.org/u?14c9ac38
http://www.nessus.org/u?15c8d0fd
http://www.nessus.org/u?1650e0e4
http://www.nessus.org/u?1f8161ab
http://www.nessus.org/u?20fadd32
http://www.nessus.org/u?24ea9f60
http://www.nessus.org/u?25eec113
http://www.nessus.org/u?2b0e7b37
http://www.nessus.org/u?314adc31
http://www.nessus.org/u?32ad91f3
http://www.nessus.org/u?33ce97e2
http://www.nessus.org/u?377c9e6d
http://www.nessus.org/u?3d24b8a1
http://www.nessus.org/u?3f363e7e
http://www.nessus.org/u?40dfe940
http://www.nessus.org/u?41d7ab03
http://www.nessus.org/u?43009add
http://www.nessus.org/u?449cd879
http://www.nessus.org/u?48844f28
http://www.nessus.org/u?4eaecc36
http://www.nessus.org/u?51025c0b
http://www.nessus.org/u?512ee3bc
http://www.nessus.org/u?53c0b366
http://www.nessus.org/u?540ccebf
http://www.nessus.org/u?563424d1
http://www.nessus.org/u?5b3d8cdf
http://www.nessus.org/u?5b946e2a
http://www.nessus.org/u?5e77fe41
http://www.nessus.org/u?5f441b11
http://www.nessus.org/u?5fbf0639
http://www.nessus.org/u?5ffa969a
http://www.nessus.org/u?68368f67
http://www.nessus.org/u?68e04471
http://www.nessus.org/u?6ef2acf5
http://www.nessus.org/u?73b3d40a
http://www.nessus.org/u?74e4172a
http://www.nessus.org/u?78d5aba7
http://www.nessus.org/u?7da64e4c
http://www.nessus.org/u?8343232a
http://www.nessus.org/u?8ec41f21
http://www.nessus.org/u?90d14d9d
http://www.nessus.org/u?91484365
http://www.nessus.org/u?94760122
http://www.nessus.org/u?94f3ddab
http://www.nessus.org/u?958eae6d
http://www.nessus.org/u?963f8094
http://www.nessus.org/u?98243499
http://www.nessus.org/u?9c8a411f
http://www.nessus.org/u?9e402e53
http://www.nessus.org/u?9f54c625
http://www.nessus.org/u?a1a8cc57
http://www.nessus.org/u?a80f586f
http://www.nessus.org/u?aea2ed13
http://www.nessus.org/u?b24d4522
http://www.nessus.org/u?b50f1cb2
http://www.nessus.org/u?b796525e
http://www.nessus.org/u?b99150d9
http://www.nessus.org/u?b99ab886
http://www.nessus.org/u?bd9a5a0f
http://www.nessus.org/u?be1a774a
http://www.nessus.org/u?c14848f4
http://www.nessus.org/u?c1856222
http://www.nessus.org/u?c7c34b76
http://www.nessus.org/u?c92b1fa0
http://www.nessus.org/u?c9e7bc87
http://www.nessus.org/u?cc12f75e
http://www.nessus.org/u?ccc74778
http://www.nessus.org/u?ccc810cd
http://www.nessus.org/u?d0a5723d
http://www.nessus.org/u?d75b88a7
http://www.nessus.org/u?dca9fb53
http://www.nessus.org/u?dec511ee
http://www.nessus.org/u?e56aa124
http://www.nessus.org/u?e64f1554
http://www.nessus.org/u?e7ee2d53
http://www.nessus.org/u?ee00c510
http://www.nessus.org/u?f364eaea
http://www.nessus.org/u?f55916aa
http://www.nessus.org/u?f76c9cce
Plugin 詳細資訊
嚴重性: Critical
ID: 359305
檔案名稱: ciq_rocky_linux_8_6_ciqsa-2026_0030.nasl
版本: 1.4
類型: Local
已發布: 2026/10/1
已更新: 2026/10/11
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Medium
分數: 4.9
百分位數: 57.15
Vendor
Vendor Severity: Critical
CVSS v2
風險因素: High
基本分數: 9
時間性分數: 7
媒介: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2015-3144
CVSS v3
風險因素: Critical
基本分數: 9.8
時間性分數: 8.8
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:P/RL:O/RC:C
CVSS 評分資料來源: CVE-2019-5482
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/1
弱點發布日期: 2023/5/18
參考資訊
CVE: CVE-2009-0037, CVE-2011-2192, CVE-2012-0036, CVE-2013-0249, CVE-2013-1944, CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-3613, CVE-2014-3620, CVE-2014-3707, CVE-2014-8150, CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236, CVE-2015-3237, CVE-2016-0755, CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586, CVE-2017-1000099, CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-2629, CVE-2017-7407, CVE-2017-7468, CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, CVE-2018-0500, CVE-2018-1000005, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000300, CVE-2018-1000301, CVE-2018-16839, CVE-2018-16840, CVE-2018-16842, CVE-2018-16890, CVE-2018-20483, CVE-2019-3822, CVE-2019-3823, CVE-2019-5436, CVE-2019-5481, CVE-2019-5482, CVE-2020-8177, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2021-22876, CVE-2021-22898, CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22946, CVE-2021-22947, CVE-2022-22576, CVE-2022-27774, CVE-2022-27776, CVE-2022-27782, CVE-2022-32206, CVE-2022-32208, CVE-2022-35252, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2024-2398