Rocky Linux 9.2 主机上存在安装的程序包，该程序包受到 CIQ ciqsa-2026_1588 公告中提及的多个漏洞的影响。

    此公告汇总了 CIQ LTS 9.2中 perl SRPM 的安全补丁。它解决了 18 个 CVE：
    CVE-2020-10878、、CVE-2008-2827CVE-2018-6798、CVE-2016-6185CVE-2018-6797和 13 个。

Tenable 已直接从 CIQ 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Rocky Linux 9.2 主機已安裝的套件會受到 CIQ ciqsa-2026_1588 公告中提及的多個弱點影響。

    此公告彙總了 CIQ LTS 9.2中 perl SRPM 的安全性修正。它解決了 18 個 CVE：
    CVE-2020-10878、CVE-2008-2827、CVE-2018-6798、CVE-2016-6185CVE-2018-6797、 和另外 13 個。

Tenable 已直接從 CIQ 安全性公告中擷取上述描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Rocky Linuxの 9.2 ホストには、CIQ ciqsa-2026_1588 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    このアドバイザリは、CIQ LTS 9.2の perl SRPM のセキュリティ修正をまとめたものです。18 件の CVE に対処します:
    CVE-2020-10878、 CVE-2008-2827、 CVE-2018-6798、 CVE-2016-6185、 CVE-2018-6797、その他 13 個。

Tenableは、前述の記述ブロックをCIQセキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Specially crafted regular expressions could crash perl (CVE-2008-1927).

Insufficient symlink checks in the File::Path could result in wrong file permissions (CVE-2008-2827).

Additionally problem in the CGI module was fixed that could result in an endless loop if uploads were cancelled.

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has perl packages installed that are affected by multiple vulnerabilities:

  - Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers     to execute arbitrary code via a large item count. (CVE-2018-6913)

  - Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted     remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an     absolute path or has .. sequences. (CVE-2007-4829)

  - The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing     a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a     different vulnerability than CVE-2005-0448 and CVE-2004-0452. (CVE-2008-2827)

  - Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a     UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression     match. (CVE-2009-3626)

  - The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers     to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers     an uninitialized pointer dereference. (CVE-2011-2728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack.

The updated packages have been patched to fix this.

The remote NewStart CGSL host, running version MAIN 6.06, has perl packages installed that are affected by multiple vulnerabilities:

  - Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers     to execute arbitrary code via a large item count. (CVE-2018-6913)

  - Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted     remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an     absolute path or has .. sequences. (CVE-2007-4829)

  - The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing     a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a     different vulnerability than CVE-2005-0448 and CVE-2004-0452. (CVE-2008-2827)

  - Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a     UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression     match. (CVE-2009-3626)

  - The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers     to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers     an uninitialized pointer dereference. (CVE-2011-2728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2008-2827 perl: insecure use of chmod in rmtree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1588 advisory.

    This advisory aggregates security fixes for the perl SRPM in CIQ LTS 9.2. It addresses 18 CVEs:
    CVE-2020-10878, CVE-2008-2827, CVE-2018-6798, CVE-2016-6185, CVE-2018-6797, and 13 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
363401	Rocky Linux 9.2 [CIQ] 安全更新：perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit 等多种漏洞（ciqsa-2026_1588）	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/7	critical
363401	Rocky Linux 9.2 [CIQ] 安全性更新：perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc 多個弱點（ciqsa-2026_1588）	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/7	critical
363401	Rocky Linux 9.2 [CIQ] セキュリティ更新:perl/perl-Attribute-Handlers/perl-AutoLoader/perl-AutoSplit/etc 複数の脆弱性(ciqsa-2026_1588)	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/7	critical
40104	openSUSE Security Update : perl (perl-101)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
301232	NewStart CGSL MAIN 6.06 (SP) : perl Multiple Vulnerabilities (NS-SA-2026-0016)	Nessus	NewStart CGSL Local Security Checks	2026/3/6	2026/3/9	critical
37106	Mandriva Linux Security Advisory : perl (MDVSA-2008:165)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	medium
266244	NewStart CGSL MAIN 6.06 : perl Multiple Vulnerabilities (NS-SA-2025-0211)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	critical
33371	Fedora 9 : perl-5.10.0-27.fc9 (2008-5739)	Nessus	Fedora Local Security Checks	2008/7/2	2021/1/11	medium
363401	Rocky Linux 9.2 [CIQ] Security Update: perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc Multiple Vulnerabilities (ciqsa-2026_1588)	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/7	critical

检测

插件搜索

critical

critical

critical

medium

critical

medium

critical

medium

critical