openssh-10.0p1用于修复CVE-2025-26465、CVE-2025-26466

升级openssh-10.0p1 openssh-10.0p1用于修复CVE-2025-26465、CVE-2025-26466

CVE-2025-26465-OpenSSH 6.8p1至9.9p1版本中的ssh（1）
（包括在内）包含一个逻辑错误，允许在路径上
攻击者（又名MITM）在以下情况下冒充任何服务器
验证是否启用了HostKeyDNS选项。默认情况下，此选项处于禁用状态。
*修复OpenSSH 9.5p1至9.9p1版本中的CVE-2025-26466-sshd（8）
（包括在内）易受内存/CPU拒绝服务相关攻击
涉及SSH2_MSG_PING分组的处理。这种情况可能是
使用现有的PerSourcePenalties功能进行缓解。

适用于centos7

rpm包地址：https://download.csdn.net/download/qq_46023525/90676010

1.上传openssh rpm包，备份配置文件

[root@localhost openssh]# ls
openssh-10.0p1-1.el7.x86_64.rpm  openssh-clients-10.0p1-1.el7.x86_64.rpm  openssh-server-10.0p1-1.el7.x86_64.rpm

2.一定要备份配置文件（重要！！！）

cp -r /etc/ssh/ /etc/ssh.bak/
cp -r /etc/pam.d/ /etc/pam.d.bak/

3.查看当前版本

[root@localhost ~]# ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017

4.一定不要关闭当前ssh连接窗口，尽量多开ssh窗口（重要！！！）
5.执行升级操作，升级完成后进行sshd服务重启，重启完成后新开ssh窗口进行测试

[root@localhost openssh]# rpm -Uvh openssh-*
准备中...                          ################################# [100%]
正在升级/安装...
   1:openssh-10.0p1-1.el7             ################################# [ 17%]
   2:openssh-clients-10.0p1-1.el7     ################################# [ 33%]
   3:openssh-server-10.0p1-1.el7      ################################# [ 50%]
正在清理/删除...
   4:openssh-server-7.4p1-16.el7      ################################# [ 67%]
   5:openssh-clients-7.4p1-16.el7     ################################# [ 83%]
   6:openssh-7.4p1-16.el7             ################################# [100%]
[root@localhost openssh]# ssh -V
OpenSSH_10.0p2, OpenSSL 3.0.16 11 Feb 2025
[root@localhost openssh]# systemctl restart sshd

6.如重启报错可按一下步骤解决

[root@localhost openssh]# systemctl restart sshd
Job for sshd.service failed because the control process exited with error code. See "systemctl status sshd.service" and "journalctl -xe" for details.

[root@localhost openssh]# systemctl status sshd.service
● sshd.service - SYSV: OpenSSH server daemon
   Loaded: loaded (/etc/rc.d/init.d/sshd; bad; vendor preset: enabled)
   Active: failed (Result: exit-code) since 三 2025-04-23 12:07:36 CST; 11s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 29878 ExecStop=/etc/rc.d/init.d/sshd stop (code=exited, status=0/SUCCESS)
  Process: 30214 ExecStart=/etc/rc.d/init.d/sshd start (code=exited, status=1/FAILURE)
 Main PID: 6949 (code=exited, status=0/SUCCESS)

4月 23 12:07:36 localhost.localdomain sshd[30214]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
4月 23 12:07:36 localhost.localdomain sshd[30214]: Permissions 0640 for '/etc/ssh/ssh_host_ed25519_key' ar...pen.
4月 23 12:07:36 localhost.localdomain sshd[30214]: It is required that your private key files are NOT acce...ers.
4月 23 12:07:36 localhost.localdomain sshd[30214]: This private key will be ignored.
4月 23 12:07:36 localhost.localdomain sshd[30214]: sshd: no hostkeys available -- exiting.
4月 23 12:07:36 localhost.localdomain sshd[30214]: [失败]
4月 23 12:07:36 localhost.localdomain systemd[1]: sshd.service: control process exited, code=exited status=1
4月 23 12:07:36 localhost.localdomain systemd[1]: Failed to start SYSV: OpenSSH server daemon.
4月 23 12:07:36 localhost.localdomain systemd[1]: Unit sshd.service entered failed state.
4月 23 12:07:36 localhost.localdomain systemd[1]: sshd.service failed.
Hint: Some lines were ellipsized, use -l to show in full.

7.根据报错结果缩小权限

[root@localhost openssh]# chmod 600 /etc/ssh/*
[root@localhost openssh]# systemctl restart sshd
[root@localhost openssh]# ssh -V
OpenSSH_10.0p2, OpenSSL 3.0.16 11 Feb 2025

8.测试ssh连接没问题后即可。