Rocky Linux 8.6 [CIQ] 安全更新：curl / curl-debuginfo / curl-debugsource / curl-minimal 等 多种漏洞 （ciqsa-2026_0030）
critical Nessus 插件 ID 359305
语言：
简介
Rocky Linux 主机缺少一个或多个安全更新。描述
Rocky Linux 8.6 主机上存在安装的程序包，该程序包受到 CIQ ciqsa-2026_0030 公告中提及的多个漏洞的影响。此公告汇总了 CIQ LTS 8.6中 curl SRPM 的安全修复。它解决了 4 个 CVE：
CVE-2023-38546、CVE-2023-46218、CVE-2023-28322、CVE-2024-2398。
Tenable 已直接从 CIQ 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
根据 CIQ 公告中的指南更新受影响的程序包 ciqsa-2026_0030。另见
https://github.com/ctrliq/advisories
http://www.nessus.org/u?009302b8
http://www.nessus.org/u?017d48a7
http://www.nessus.org/u?026db809
http://www.nessus.org/u?02d740fe
http://www.nessus.org/u?06755d55
http://www.nessus.org/u?0b900e14
http://www.nessus.org/u?0e043f9d
http://www.nessus.org/u?0f78a928
http://www.nessus.org/u?13ce4b12
http://www.nessus.org/u?14c9ac38
http://www.nessus.org/u?15c8d0fd
http://www.nessus.org/u?1650e0e4
http://www.nessus.org/u?1f8161ab
http://www.nessus.org/u?20fadd32
http://www.nessus.org/u?24ea9f60
http://www.nessus.org/u?25eec113
http://www.nessus.org/u?2b0e7b37
http://www.nessus.org/u?314adc31
http://www.nessus.org/u?32ad91f3
http://www.nessus.org/u?33ce97e2
http://www.nessus.org/u?377c9e6d
http://www.nessus.org/u?3d24b8a1
http://www.nessus.org/u?3f363e7e
http://www.nessus.org/u?40dfe940
http://www.nessus.org/u?41d7ab03
http://www.nessus.org/u?43009add
http://www.nessus.org/u?449cd879
http://www.nessus.org/u?48844f28
http://www.nessus.org/u?4eaecc36
http://www.nessus.org/u?51025c0b
http://www.nessus.org/u?512ee3bc
http://www.nessus.org/u?53c0b366
http://www.nessus.org/u?540ccebf
http://www.nessus.org/u?563424d1
http://www.nessus.org/u?5b3d8cdf
http://www.nessus.org/u?5b946e2a
http://www.nessus.org/u?5e77fe41
http://www.nessus.org/u?5f441b11
http://www.nessus.org/u?5fbf0639
http://www.nessus.org/u?5ffa969a
http://www.nessus.org/u?68368f67
http://www.nessus.org/u?68e04471
http://www.nessus.org/u?6ef2acf5
http://www.nessus.org/u?73b3d40a
http://www.nessus.org/u?74e4172a
http://www.nessus.org/u?78d5aba7
http://www.nessus.org/u?7da64e4c
http://www.nessus.org/u?8343232a
http://www.nessus.org/u?8ec41f21
http://www.nessus.org/u?90d14d9d
http://www.nessus.org/u?91484365
http://www.nessus.org/u?94760122
http://www.nessus.org/u?94f3ddab
http://www.nessus.org/u?958eae6d
http://www.nessus.org/u?963f8094
http://www.nessus.org/u?98243499
http://www.nessus.org/u?9c8a411f
http://www.nessus.org/u?9e402e53
http://www.nessus.org/u?9f54c625
http://www.nessus.org/u?a1a8cc57
http://www.nessus.org/u?a80f586f
http://www.nessus.org/u?aea2ed13
http://www.nessus.org/u?b24d4522
http://www.nessus.org/u?b50f1cb2
http://www.nessus.org/u?b796525e
http://www.nessus.org/u?b99150d9
http://www.nessus.org/u?b99ab886
http://www.nessus.org/u?bd9a5a0f
http://www.nessus.org/u?be1a774a
http://www.nessus.org/u?c14848f4
http://www.nessus.org/u?c1856222
http://www.nessus.org/u?c7c34b76
http://www.nessus.org/u?c92b1fa0
http://www.nessus.org/u?c9e7bc87
http://www.nessus.org/u?cc12f75e
http://www.nessus.org/u?ccc74778
http://www.nessus.org/u?ccc810cd
http://www.nessus.org/u?d0a5723d
http://www.nessus.org/u?d75b88a7
http://www.nessus.org/u?dca9fb53
http://www.nessus.org/u?dec511ee
http://www.nessus.org/u?e56aa124
http://www.nessus.org/u?e64f1554
http://www.nessus.org/u?e7ee2d53
http://www.nessus.org/u?ee00c510
http://www.nessus.org/u?f364eaea
http://www.nessus.org/u?f55916aa
http://www.nessus.org/u?f76c9cce
插件详情
严重性: Critical
ID: 359305
文件名: ciq_rocky_linux_8_6_ciqsa-2026_0030.nasl
版本: 1.4
类型: Local
发布时间: 2026/10/1
最近更新时间: 2026/10/11
支持的传感器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Medium
分数: 4.9
百分位: 57.15
Vendor
Vendor Severity: Critical
CVSS v2
风险因素: High
基本分数: 9
时间分数: 7
矢量: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS 分数来源: CVE-2015-3144
CVSS v3
风险因素: Critical
基本分数: 9.8
时间分数: 8.8
矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:P/RL:O/RC:C
CVSS 分数来源: CVE-2019-5482
漏洞信息
必需的 KB 项: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可利用: true
易利用性: Exploits are available
补丁发布日期: 2026/9/1
漏洞发布日期: 2023/5/18
参考资料信息
CVE: CVE-2009-0037, CVE-2011-2192, CVE-2012-0036, CVE-2013-0249, CVE-2013-1944, CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-3613, CVE-2014-3620, CVE-2014-3707, CVE-2014-8150, CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236, CVE-2015-3237, CVE-2016-0755, CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586, CVE-2017-1000099, CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-2629, CVE-2017-7407, CVE-2017-7468, CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, CVE-2018-0500, CVE-2018-1000005, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000300, CVE-2018-1000301, CVE-2018-16839, CVE-2018-16840, CVE-2018-16842, CVE-2018-16890, CVE-2018-20483, CVE-2019-3822, CVE-2019-3823, CVE-2019-5436, CVE-2019-5481, CVE-2019-5482, CVE-2020-8177, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2021-22876, CVE-2021-22898, CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22946, CVE-2021-22947, CVE-2022-22576, CVE-2022-27774, CVE-2022-27776, CVE-2022-27782, CVE-2022-32206, CVE-2022-32208, CVE-2022-35252, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2024-2398