Detections
Analytics
Rocky Linux 8.6 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (ciqsa-2026_0041)
critical Nessus Plugin ID 357986
Synopsis
The Rocky Linux host is missing one or more security updates.Description
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0041 advisory.This advisory aggregates security fixes for the firefox SRPM in CIQ LTS 8.6. It addresses 120 CVEs:
CVE-2024-3857, CVE-2024-3859, CVE-2024-3864, CVE-2024-4367, CVE-2024-3854, and 115 more.
Tenable has extracted the preceding description block directly from the CIQ security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages based on the guidance in CIQ advisory ciqsa-2026_0041.See Also
https://github.com/ctrliq/advisories
http://www.nessus.org/u?01b63d2f
http://www.nessus.org/u?01f1ed75
http://www.nessus.org/u?05bbf64c
http://www.nessus.org/u?0b1c385b
http://www.nessus.org/u?0de809d1
http://www.nessus.org/u?10d46fb3
http://www.nessus.org/u?1223eebe
http://www.nessus.org/u?15764a17
http://www.nessus.org/u?16dc8ebd
http://www.nessus.org/u?17d92cd0
http://www.nessus.org/u?1897e2ca
http://www.nessus.org/u?18a1d0f0
http://www.nessus.org/u?19eacdad
http://www.nessus.org/u?1a4a9ada
http://www.nessus.org/u?1b26fe14
http://www.nessus.org/u?1cc1314b
http://www.nessus.org/u?1ffd8330
http://www.nessus.org/u?2429b20c
http://www.nessus.org/u?242afdc0
http://www.nessus.org/u?24a37751
http://www.nessus.org/u?26a9b1c3
http://www.nessus.org/u?2e8ed46f
http://www.nessus.org/u?363bd834
http://www.nessus.org/u?385f1ec0
http://www.nessus.org/u?386544c6
http://www.nessus.org/u?39e1de6e
http://www.nessus.org/u?3b98275c
http://www.nessus.org/u?3dbb2a62
http://www.nessus.org/u?3e2cfd42
http://www.nessus.org/u?411d4523
http://www.nessus.org/u?4305b074
http://www.nessus.org/u?43c121c7
http://www.nessus.org/u?46ca8868
http://www.nessus.org/u?4843839f
http://www.nessus.org/u?4991243d
http://www.nessus.org/u?4ad704f4
http://www.nessus.org/u?4fb0560a
http://www.nessus.org/u?51d78492
http://www.nessus.org/u?58a739f5
http://www.nessus.org/u?59e1cd41
http://www.nessus.org/u?5bd0752d
http://www.nessus.org/u?5ce507a6
http://www.nessus.org/u?5d2f05ad
http://www.nessus.org/u?5fc218c4
http://www.nessus.org/u?6216313e
http://www.nessus.org/u?6367a600
http://www.nessus.org/u?64d3d1b7
http://www.nessus.org/u?69ba7797
http://www.nessus.org/u?6a36e830
http://www.nessus.org/u?712419c8
http://www.nessus.org/u?725ad0e0
http://www.nessus.org/u?72f3c80b
http://www.nessus.org/u?7495f990
http://www.nessus.org/u?7555ee93
http://www.nessus.org/u?76a4ab2b
http://www.nessus.org/u?76e36367
http://www.nessus.org/u?7c8cb930
http://www.nessus.org/u?7d427bb2
http://www.nessus.org/u?810836c3
http://www.nessus.org/u?81964e54
http://www.nessus.org/u?81cf3628
http://www.nessus.org/u?855ea025
http://www.nessus.org/u?86f8a191
http://www.nessus.org/u?88a7c7d5
http://www.nessus.org/u?88d64241
http://www.nessus.org/u?8aa9df6f
http://www.nessus.org/u?8abaaa70
http://www.nessus.org/u?8da61baa
http://www.nessus.org/u?8ea7f87b
http://www.nessus.org/u?91d43b3b
http://www.nessus.org/u?93b6e6ca
http://www.nessus.org/u?96e287dc
http://www.nessus.org/u?97404923
http://www.nessus.org/u?9adef416
http://www.nessus.org/u?9f55df0e
http://www.nessus.org/u?a24cdb5c
http://www.nessus.org/u?a8dfa2ed
http://www.nessus.org/u?a8f1981b
http://www.nessus.org/u?a91a1a87
http://www.nessus.org/u?a9ae0506
http://www.nessus.org/u?a9af331e
http://www.nessus.org/u?b1bc0554
http://www.nessus.org/u?b32f2e83
http://www.nessus.org/u?b45e57df
http://www.nessus.org/u?b472dde4
http://www.nessus.org/u?b5dfcb1f
http://www.nessus.org/u?b63cb5b2
http://www.nessus.org/u?b6cd6fe5
http://www.nessus.org/u?b85c0314
http://www.nessus.org/u?b95aa0e0
http://www.nessus.org/u?b9ab8b78
http://www.nessus.org/u?bb5dc7fb
http://www.nessus.org/u?bd245532
http://www.nessus.org/u?bdb8b6a7
http://www.nessus.org/u?c5a8ac11
http://www.nessus.org/u?cb863f51
http://www.nessus.org/u?ccaa52b1
http://www.nessus.org/u?d459d6fb
http://www.nessus.org/u?d4f5b044
http://www.nessus.org/u?d65c9f7a
http://www.nessus.org/u?d7b703ea
http://www.nessus.org/u?dd530caf
http://www.nessus.org/u?de0fb895
http://www.nessus.org/u?de601184
http://www.nessus.org/u?de7ce3c8
http://www.nessus.org/u?e03e90a0
http://www.nessus.org/u?e18ab3f3
http://www.nessus.org/u?e35d0f50
http://www.nessus.org/u?e6912ae7
http://www.nessus.org/u?e6cf9c4f
http://www.nessus.org/u?e73edb4c
http://www.nessus.org/u?e8427c7f
http://www.nessus.org/u?e9845c1b
http://www.nessus.org/u?eb24d7c2
http://www.nessus.org/u?f05aa5fe
http://www.nessus.org/u?f118c62d
http://www.nessus.org/u?f5c07008
http://www.nessus.org/u?f78eb2cb
http://www.nessus.org/u?f8e03195
Plugin Details
Severity: Critical
ID: 357986
File Name: ciq_rocky_linux_8_6_ciqsa-2026_0041.nasl
Version: 1.1
Type: Local
Published: 10/1/2026
Updated: 10/1/2026
Supported Sensors: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.87
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2024-4777
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS Score Source: CVE-2023-5730
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/1/2026
Vulnerability Publication Date: 9/20/2022
CISA Known Exploited Vulnerability Due Dates: 10/4/2023, 10/23/2023
Reference Information
CVE: CVE-2022-45403, CVE-2022-45404, CVE-2022-45405, CVE-2022-45406, CVE-2022-45408, CVE-2022-45409, CVE-2022-45410, CVE-2022-45411, CVE-2022-45412, CVE-2022-45416, CVE-2022-45418, CVE-2022-45420, CVE-2022-45421, CVE-2022-46871, CVE-2022-46872, CVE-2022-46874, CVE-2022-46877, CVE-2022-46878, CVE-2022-46880, CVE-2022-46881, CVE-2022-46882, CVE-2023-3600, CVE-2023-4045, CVE-2023-4046, CVE-2023-4047, CVE-2023-4048, CVE-2023-4049, CVE-2023-4050, CVE-2023-4051, CVE-2023-4053, CVE-2023-4055, CVE-2023-4056, CVE-2023-4057, CVE-2023-4573, CVE-2023-4574, CVE-2023-4575, CVE-2023-4577, CVE-2023-4578, CVE-2023-4580, CVE-2023-4581, CVE-2023-4583, CVE-2023-4584, CVE-2023-4585, CVE-2023-4863, CVE-2023-5169, CVE-2023-5171, CVE-2023-5176, CVE-2023-5217, CVE-2023-5388, CVE-2023-5721, CVE-2023-5724, CVE-2023-5725, CVE-2023-5728, CVE-2023-5730, CVE-2023-5732, CVE-2023-6204, CVE-2023-6205, CVE-2023-6206, CVE-2023-6207, CVE-2023-6208, CVE-2023-6209, CVE-2023-6212, CVE-2023-6856, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6860, CVE-2023-6861, CVE-2023-6862, CVE-2023-6863, CVE-2023-6864, CVE-2024-0741, CVE-2024-0742, CVE-2024-0743, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755, CVE-2024-1546, CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1551, CVE-2024-1552, CVE-2024-1553, CVE-2024-2607, CVE-2024-2608, CVE-2024-2609, CVE-2024-2610, CVE-2024-2611, CVE-2024-2612, CVE-2024-2614, CVE-2024-2616, CVE-2024-29944, CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-3859, CVE-2024-3861, CVE-2024-3864, CVE-2024-4367, CVE-2024-4767, CVE-2024-4768, CVE-2024-4769, CVE-2024-4770, CVE-2024-4777, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700, CVE-2024-5702, CVE-2024-6601, CVE-2024-6603, CVE-2024-6604