Rocky Linux 9.2 [CIQ] 安全更新：mysql / mysql-common / mysql-debuginfo / mysql-debugsource 等 多种漏洞 （ciqsa-2026_0943）
high Nessus 插件 ID 357196
语言：
简介
Rocky Linux 主机缺少一个或多个安全更新。描述
Rocky Linux 9.2 主机上存在安装的程序包，该程序包受到 CIQ ciqsa-2026_0943 公告中提及的多个漏洞的影响。此公告汇总了 CIQ LTS 9.2中 mysql SRPM 的安全修复。它解决了 87 个 CVE：
CVE-2022-4899、、CVE-2024-20960、CVE-2024-20964CVE-2024-20972CVE-2024-20983和 82 个。
Tenable 已直接从 CIQ 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
根据 CIQ 公告中的指南更新受影响的程序包 ciqsa-2026_0943。另见
https://github.com/ctrliq/advisories
http://www.nessus.org/u?030c8229
http://www.nessus.org/u?05fd1aa9
http://www.nessus.org/u?073bb3e2
http://www.nessus.org/u?082f2803
http://www.nessus.org/u?08f1696c
http://www.nessus.org/u?0b3e3315
http://www.nessus.org/u?0ba90634
http://www.nessus.org/u?0f340949
http://www.nessus.org/u?0fd8df9c
http://www.nessus.org/u?1185db5e
http://www.nessus.org/u?1dd773d4
http://www.nessus.org/u?1decd701
http://www.nessus.org/u?21dc1ea2
http://www.nessus.org/u?2332406e
http://www.nessus.org/u?26e393d5
http://www.nessus.org/u?29226b63
http://www.nessus.org/u?2a1645e7
http://www.nessus.org/u?2fbb9a79
http://www.nessus.org/u?3389a81c
http://www.nessus.org/u?35ca6263
http://www.nessus.org/u?3e53ca62
http://www.nessus.org/u?4091a153
http://www.nessus.org/u?45c90b98
http://www.nessus.org/u?479b1d13
http://www.nessus.org/u?47e39f04
http://www.nessus.org/u?48f58074
http://www.nessus.org/u?4c992643
http://www.nessus.org/u?4d56c6dc
http://www.nessus.org/u?4f6f37b7
http://www.nessus.org/u?514ff271
http://www.nessus.org/u?57159717
http://www.nessus.org/u?597f1725
http://www.nessus.org/u?5c70d711
http://www.nessus.org/u?671473a1
http://www.nessus.org/u?692e7367
http://www.nessus.org/u?6f3a6b43
http://www.nessus.org/u?710b7d56
http://www.nessus.org/u?74f404eb
http://www.nessus.org/u?7a3b15f3
http://www.nessus.org/u?8102f29e
http://www.nessus.org/u?82c142e9
http://www.nessus.org/u?83bd9f66
http://www.nessus.org/u?85d40f3e
http://www.nessus.org/u?86a6ef05
http://www.nessus.org/u?88b0cd42
http://www.nessus.org/u?8d4524f1
http://www.nessus.org/u?8f9fb7e4
http://www.nessus.org/u?94366a5f
http://www.nessus.org/u?95974c43
http://www.nessus.org/u?969348c9
http://www.nessus.org/u?98496d51
http://www.nessus.org/u?98678153
http://www.nessus.org/u?9a0ab0f9
http://www.nessus.org/u?9cb8d6f8
http://www.nessus.org/u?9fc85917
http://www.nessus.org/u?a012460b
http://www.nessus.org/u?a59c3d47
http://www.nessus.org/u?a61968ee
http://www.nessus.org/u?a76ff374
http://www.nessus.org/u?a845da41
http://www.nessus.org/u?ab4b38e9
http://www.nessus.org/u?ab98a248
http://www.nessus.org/u?b0a76a30
http://www.nessus.org/u?b1c86dfc
http://www.nessus.org/u?b1fd6b73
http://www.nessus.org/u?b65ff616
http://www.nessus.org/u?b9073653
http://www.nessus.org/u?bb7adab2
http://www.nessus.org/u?bdc12047
http://www.nessus.org/u?c18f1f5c
http://www.nessus.org/u?c42e0307
http://www.nessus.org/u?c909fcea
http://www.nessus.org/u?d0327c4e
http://www.nessus.org/u?d615eb85
http://www.nessus.org/u?dd4814e7
http://www.nessus.org/u?ddf55f43
http://www.nessus.org/u?def48f69
http://www.nessus.org/u?e0ce1c1a
http://www.nessus.org/u?e85e3978
http://www.nessus.org/u?e976f09a
http://www.nessus.org/u?e9f26196
http://www.nessus.org/u?eb78a265
http://www.nessus.org/u?f43925dc
http://www.nessus.org/u?f67c97d7
http://www.nessus.org/u?f79ac5f2
http://www.nessus.org/u?f9f94a90
插件详情
严重性: High
ID: 357196
文件名: ciq_rocky_linux_9_2_ciqsa-2026_0943.nasl
版本: 1.1
类型: Local
发布时间: 2026/10/1
最近更新时间: 2026/10/1
支持的传感器: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Medium
分数: 4.9
百分位: 58.36
Vendor
Vendor Severity: High
CVSS v2
风险因素: High
基本分数: 7.1
时间分数: 5.3
矢量: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C
CVSS 分数来源: CVE-2023-21980
CVSS v3
风险因素: High
基本分数: 7.1
时间分数: 6.2
矢量: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:U/RL:O/RC:C
漏洞信息
必需的 KB 项: Host/OS/extended-third-party, Host/local_checks_enabled, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/cpu
易利用性: No known exploits are available
补丁发布日期: 2026/9/1
漏洞发布日期: 2022/8/22
参考资料信息
CVE: CVE-2022-4899, CVE-2023-21911, CVE-2023-21919, CVE-2023-21920, CVE-2023-21929, CVE-2023-21933, CVE-2023-21935, CVE-2023-21940, CVE-2023-21945, CVE-2023-21946, CVE-2023-21947, CVE-2023-21953, CVE-2023-21955, CVE-2023-21962, CVE-2023-21966, CVE-2023-21972, CVE-2023-21976, CVE-2023-21977, CVE-2023-21980, CVE-2023-21982, CVE-2023-22005, CVE-2023-22007, CVE-2023-22008, CVE-2023-22032, CVE-2023-22033, CVE-2023-22038, CVE-2023-22046, CVE-2023-22048, CVE-2023-22053, CVE-2023-22054, CVE-2023-22056, CVE-2023-22057, CVE-2023-22058, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22066, CVE-2023-22068, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22084, CVE-2023-22092, CVE-2023-22097, CVE-2023-22103, CVE-2023-22104, CVE-2023-22110, CVE-2023-22111, CVE-2023-22112, CVE-2023-22113, CVE-2023-22114, CVE-2023-22115, CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963, CVE-2024-20964, CVE-2024-20965, CVE-2024-20966, CVE-2024-20967, CVE-2024-20968, CVE-2024-20969, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20981, CVE-2024-20982, CVE-2024-20983, CVE-2024-20984, CVE-2024-20985, CVE-2024-20993, CVE-2024-21049, CVE-2024-21050, CVE-2024-21051, CVE-2024-21052, CVE-2024-21053, CVE-2024-21055, CVE-2024-21056, CVE-2024-21057, CVE-2024-21061, CVE-2024-21137, CVE-2024-21200