Kylin Server V10修复openssh安全漏洞

一、升级前的准备

1．安装telnet软件

root@localhost:~# dnf -y install telnet

2．设置开机启动

[root@localhost ~]# systemctl enable telnet.socket

3．启动telnet服务

[root@localhost ~]# systemctl start telnet.socket

4．查看telnet服务端口是否开启

root@Localhost:~# ss -antp | grep 23

二、升级openssh

1．查看当前服务器的ssh版本信息

root@Localhost:~# ssh –V

OpenSSH_8.2p1, OpenSSL 1.1.1f  31 Mar 2020

2．查看openssl版本信息

root@Localhost:~#openssl version –a

OpenSSL 1.1.1f  31 Mar 2020 built on: Tue Jan 19 11:47:52 2021 UTC platform: linux-aarch64 options:  bn(64,64) md2(char) rc4(char) des(int) idea(int) blowfish(ptr) compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -O3 -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/localhost/localhost-hardened-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -Wa,--noexecstack -specs=/usr/lib/rpm/localhost/localhost-hardened-ld -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DZLIB -DNDEBUG -DPURIFY -DDEVRANDOM="\"/dev/urandom\"" OPENSSLDIR: "/etc/pki/tls" ENGINESDIR: "/usr/lib64/engines-1.1" Seeding source: os-specific

3．卸载系统中原有的openssl软件包

root@Localhost:~# dnf -y remove openssl

4．卸载系统中原有的oepnssh-server、openssh-client、openssh软件包

root@Localhost:~# dnf -y remove openssh-server

root@Localhost:~# dnf -y remove openssh-clients

root@Localhost:~# dnf -y remove openssh

5．安装编译基础包

root@Localhost:~# dnf -y install gcc make autoconf automake

6．安装依赖软件包

[root@localhost ~]# dnf -y install pam-devel

7．安装zlib软件包

（1）下载zlib源码包

root@Localhost:/usr/local/src# wget http://www.zlib.net/zlib-1.3.