Centos7.9 制作openssh9.2p2 rpm升级包和升级实战

最新推荐文章于 2024-06-04 20:06:17 发布
最新推荐文章于 2024-06-04 20:06:17 发布
阅读量1k 收藏 3
点赞数
文章标签： openssh
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/qyq88888/article/details/132130471
版权

一、背景说明

Centos7.9 默认安装的openssh 版本为7.4p1，经绿盟扫描，存在高危漏洞，需要升级到最新。

官网只提供编译安装包，为了方便升级，先通过编译安装包，制作rpm包，并进行升级

如下为做好的rpm升级包，可直接下载使用：

openssh 9.3p2 for Centos7.9版本，及升级指引

1.1 系统版本查看 cat /etc/redhat-release

[root@mysql8test ~]# cat /etc/redhat-release 
CentOS Linux release 7.9.2009 (Core)
[root@mysql8test ~]#

二、rpm包制作

2.1、安装制作的工具

##配置yum源（省略）


##安装依赖包
[root@mysql8test ~]# yum install rpm-build zlib-devel openssl-devel gcc perl-devel pam-devel libXt-devel gtk2-devel make perl -y

##安装imake
[root@mysql8test ~]# yum install -y imake

2.2 创建编译目录

mkdir -p /root/rpmbuild

cd /root/rpmbuild

mkdir BUILD BUILDROOT RPMS SOURCES SPECS SRPMS

[root@mysql8test ~]# mkdir -p /root/rpmbuild
[root@mysql8test ~]# cd /root/rpmbuild
[root@mysql8test rpmbuild]# mkdir BUILD BUILDROOT RPMS SOURCES SPECS SRPMS
[root@mysql8test rpmbuild]#

2.3 下载openssh9.3p2和x11-ssh-askpass-1.2.4.1.tar.gz


##将下载的文件放入SOURCES文件夹下
cd /root/rpmbuild/SOURCES/

##下载openssh9.3p2
wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.3p2.tar.gz

[root@mysql8test SOURCES]# wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.3p2.tar.gz
--2023-08-06 20:12:24--  http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.3p2.tar.gz
Resolving ftp.openbsd.org (ftp.openbsd.org)... 199.185.178.81
Connecting to ftp.openbsd.org (ftp.openbsd.org)|199.185.178.81|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1835850 (1.8M) [text/plain]
Saving to: ‘openssh-9.3p2.tar.gz’

100%[=====================================================================================================>] 1,835,850    550KB/s   in 3.3s   

2023-08-06 20:12:28 (550 KB/s) - ‘openssh-9.3p2.tar.gz’ saved [1835850/1835850]

[root@mysql8test SOURCES]#



##下载x11-ssh-askpass-1.2.4.1.tar.gz
wget https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz



[root@mysql8test SOURCES]# wget https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz
--2023-08-06 20:13:56--  https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz
Resolving src.fedoraproject.org (src.fedoraproject.org)... 38.145.60.20, 38.145.60.21
Connecting to src.fedoraproject.org (src.fedoraproject.org)|38.145.60.20|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/ [following]
--2023-08-06 20:13:58--  http://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/
Connecting to src.fedoraproject.org (src.fedoraproject.org)|38.145.60.20|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/ [following]
--2023-08-06 20:13:59--  https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/
Connecting to src.fedoraproject.org (src.fedoraproject.org)|38.145.60.20|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1223 (1.2K) [text/html]
Saving to: ‘x11-ssh-askpass-1.2.4.1.tar.gz’

100%[=====================================================================================================>] 1,223       --.-K/s   in 0s      

2023-08-06 20:14:00 (81.0 MB/s) - ‘x11-ssh-askpass-1.2.4.1.tar.gz’ saved [1223/1223]

[root@mysql8test SOURCES]#

2.4 修改openssh.spec配置

[root@mysql8test SOURCES]# cd /root/rpmbuild/SOURCES/
[root@mysql8test SOURCES]# tar -zxf openssh-9.3p2.tar.gz 

##编辑编译配置文件
cp openssh-9.3p2/contrib/redhat/openssh.spec /root/rpmbuild/SPECS/
cd /root/rpmbuild/SPECS/

##结果：
[root@mysql8test SOURCES]# cp openssh-9.3p2/contrib/redhat/openssh.spec /root/rpmbuild/SPECS/
[root@mysql8test SOURCES]# cd /root/rpmbuild/SPECS/
[root@mysql8test SPECS]# ls -l
total 32
-rw-r--r--. 1 root root 30082 Aug  6 20:19 openssh.spec
[root@mysql8test SPECS]# 

##不生成askpass包
sed -i -e "s/%global no_gnome_askpass 0/%global no_gnome_askpass 1/g" openssh.spec
sed -i -e "s/%global no_x11_askpass 0/%global no_x11_askpass 1/g" openssh.spec

cat /root/rpmbuild/SPECS/openssh.spec | grep no_gnome_askpass
cat /root/rpmbuild/SPECS/openssh.spec | grep no_x11_askpass

##修改openssl-devel的报错
sed -i '/openssl-devel < 1.1/s/^/#/' openssh.spec

##修改PreReq的报错
sed -i '/PreReq:/s/^/#/' openssh.spec

##.解决Obsoletes报错
sed -i '/Obsoletes:/s/^/#/' openssh.spec

cat /root/rpmbuild/SPECS/openssh.spec | grep Obsoletes

2.5 编译源码包，制作成rpm包

cd /root/rpmbuild/SPECS/
rpmbuild -ba openssh.spec

提示

...
Processing files: openssh-server-9.3p2-1.el7.x86_64
Provides: config(openssh-server) = 9.3p2-1.el7 openssh-server = 9.3p2-1.el7 openssh-server(x86-64) = 9.3p2-1.el7
Requires(interp): /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh
Requires(rpmlib): rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1
Requires(pre): /bin/sh
Requires(post): /bin/sh
Requires(preun): /bin/sh
Requires(postun): /bin/sh
Requires: /bin/bash libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.16)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcom_err.so.2()(64bit) libcrypt.so.1()(64bit) libcrypt.so.1(GLIBC_2.2.5)(64bit) libcrypto.so.10()(64bit) libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit) libcrypto.so.10(OPENSSL_1.0.2)(64bit) libcrypto.so.10(libcrypto.so.10)(64bit) libdl.so.2()(64bit) libgssapi_krb5.so.2()(64bit) libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit) libk5crypto.so.3()(64bit) libkrb5.so.3()(64bit) libkrb5.so.3(krb5_3_MIT)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libresolv.so.2()(64bit) libutil.so.1()(64bit) libutil.so.1(GLIBC_2.2.5)(64bit) libz.so.1()(64bit) rtld(GNU_HASH)
Processing files: openssh-debuginfo-9.3p2-1.el7.x86_64
Provides: openssh-debuginfo = 9.3p2-1.el7 openssh-debuginfo(x86-64) = 9.3p2-1.el7
Requires(rpmlib): rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(CompressedFileNames) <= 3.0.4-1
Checking for unpackaged file(s): /usr/lib/rpm/check-files /root/rpmbuild/BUILDROOT/openssh-9.3p2-1.el7.x86_64
Wrote: /root/rpmbuild/SRPMS/openssh-9.3p2-1.el7.src.rpm
Wrote: /root/rpmbuild/RPMS/x86_64/openssh-9.3p2-1.el7.x86_64.rpm
Wrote: /root/rpmbuild/RPMS/x86_64/openssh-clients-9.3p2-1.el7.x86_64.rpm
Wrote: /root/rpmbuild/RPMS/x86_64/openssh-server-9.3p2-1.el7.x86_64.rpm
Wrote: /root/rpmbuild/RPMS/x86_64/openssh-debuginfo-9.3p2-1.el7.x86_64.rpm
Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.FtwsQ7
+ umask 022
+ cd /root/rpmbuild/BUILD
+ cd openssh-9.3p2
+ rm -rf /root/rpmbuild/BUILDROOT/openssh-9.3p2-1.el7.x86_64
+ exit 0
[root@mysql8test SPECS]#

2.5 查看生成的rpm包，并打包

##编译完成后的软件在，debug的包不用下载安装 
[root@mysql8test SPECS]# ls -lrth /root/rpmbuild/RPMS/x86_64/
total 4.9M
-rw-r--r--. 1 root root 634K Aug  6 20:27 openssh-9.3p2-1.el7.x86_64.rpm
-rw-r--r--. 1 root root 627K Aug  6 20:27 openssh-clients-9.3p2-1.el7.x86_64.rpm
-rw-r--r--. 1 root root 462K Aug  6 20:27 openssh-server-9.3p2-1.el7.x86_64.rpm
-rw-r--r--. 1 root root 3.2M Aug  6 20:27 openssh-debuginfo-9.3p2-1.el7.x86_64.rpm
[root@mysql8test SPECS]# 

##对rpm进行打包
[root@mysql8test x86_64]# tar -zcvf /root/openssh-9.3p2_rpm_for_centos7.9.tar.gz *.rpm
openssh-9.3p2-1.el7.x86_64.rpm
openssh-clients-9.3p2-1.el7.x86_64.rpm
openssh-debuginfo-9.3p2-1.el7.x86_64.rpm
openssh-server-9.3p2-1.el7.x86_64.rpm

三、centos7.9 从openssh7.4p1升级到openssh9.3p2

##升级之前查看版本
[root@mysql8test x86_64]# rpm -qa|grep openssh
openssh-clients-7.4p1-21.el7.x86_64
openssh-7.4p1-21.el7.x86_64
openssh-server-7.4p1-21.el7.x86_64
[root@mysql8test x86_64]# 
[root@mysql8test x86_64]# ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
[root@mysql8test x86_64]# 


##升级前备份 /etc/pam.d/sshd

cp -r /etc/ssh /etc/ssh.bak
cp -r /etc/pam.d /etc/pam.d.bak
cp /etc/pam.d/sshd /root/sshd


验证openssh是否升级成功

##升级openssh

yum localinstall openssh-9.3p2-1.el7.x86_64.rpm openssh-clients-9.3p2-1.el7.x86_64.rpm openssh-server-9.3p2-1.el7.x86_64.rpm -y


[root@mysql8test x86_64]# yum localinstall openssh-9.3p2-1.el7.x86_64.rpm openssh-clients-9.3p2-1.el7.x86_64.rpm openssh-server-9.3p2-1.el7.x86_64.rpm -y
Loaded plugins: fastestmirror
Examining openssh-9.3p2-1.el7.x86_64.rpm: openssh-9.3p2-1.el7.x86_64
Marking openssh-9.3p2-1.el7.x86_64.rpm as an update to openssh-7.4p1-21.el7.x86_64
Examining openssh-clients-9.3p2-1.el7.x86_64.rpm: openssh-clients-9.3p2-1.el7.x86_64
Marking openssh-clients-9.3p2-1.el7.x86_64.rpm as an update to openssh-clients-7.4p1-21.el7.x86_64
Examining openssh-server-9.3p2-1.el7.x86_64.rpm: openssh-server-9.3p2-1.el7.x86_64
Marking openssh-server-9.3p2-1.el7.x86_64.rpm as an update to openssh-server-7.4p1-21.el7.x86_64
Resolving Dependencies
There are unfinished transactions remaining. You might consider running yum-complete-transaction, or "yum-complete-transaction --cleanup-only" and "yum history redo last", first to finish them. If those don't work you'll have to try removing/installing packages by hand (maybe package-cleanup can help).
--> Running transaction check
---> Package openssh.x86_64 0:7.4p1-21.el7 will be updated
---> Package openssh.x86_64 0:9.3p2-1.el7 will be an update
---> Package openssh-clients.x86_64 0:7.4p1-21.el7 will be updated
---> Package openssh-clients.x86_64 0:9.3p2-1.el7 will be an update
---> Package openssh-server.x86_64 0:7.4p1-21.el7 will be updated
---> Package openssh-server.x86_64 0:9.3p2-1.el7 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

===============================================================================================================================================
 Package                         Arch                   Version                      Repository                                           Size
===============================================================================================================================================
Updating:
 openssh                         x86_64                 9.3p2-1.el7                  /openssh-9.3p2-1.el7.x86_64                         2.9 M
 openssh-clients                 x86_64                 9.3p2-1.el7                  /openssh-clients-9.3p2-1.el7.x86_64                 2.4 M
 openssh-server                  x86_64                 9.3p2-1.el7                  /openssh-server-9.3p2-1.el7.x86_64                  1.1 M

Transaction Summary
===============================================================================================================================================
Upgrade  3 Packages

Total size: 6.4 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : openssh-9.3p2-1.el7.x86_64                                                                                                  1/6 
  Updating   : openssh-server-9.3p2-1.el7.x86_64                                                                                           2/6 
  Updating   : openssh-clients-9.3p2-1.el7.x86_64                                                                                          3/6 
  Cleanup    : openssh-clients-7.4p1-21.el7.x86_64                                                                                         4/6 
  Cleanup    : openssh-server-7.4p1-21.el7.x86_64                                                                                          5/6 
  Cleanup    : openssh-7.4p1-21.el7.x86_64                                                                                                 6/6 
  Verifying  : openssh-server-9.3p2-1.el7.x86_64                                                                                           1/6 
  Verifying  : openssh-9.3p2-1.el7.x86_64                                                                                                  2/6 
  Verifying  : openssh-clients-9.3p2-1.el7.x86_64                                                                                          3/6 
  Verifying  : openssh-clients-7.4p1-21.el7.x86_64                                                                                         4/6 
  Verifying  : openssh-7.4p1-21.el7.x86_64                                                                                                 5/6 
  Verifying  : openssh-server-7.4p1-21.el7.x86_64                                                                                          6/6 

Updated:
  openssh.x86_64 0:9.3p2-1.el7              openssh-clients.x86_64 0:9.3p2-1.el7              openssh-server.x86_64 0:9.3p2-1.el7             

Complete!
[root@mysql8test x86_64]# 
[root@mysql8test x86_64]# ssh -V
OpenSSH_9.3p2, OpenSSL 1.0.2k-fips  26 Jan 2017
[root@mysql8test x86_64]#

##重启sshd出现报错
[root@mysql8test x86_64]# systemctl restart sshd
Job for sshd.service failed because the control process exited with error code. See "systemctl status sshd.service" and "journalctl -xe" for details.
[root@mysql8test x86_64]# systemctl status sshd.service
● sshd.service - SYSV: OpenSSH server daemon
   Loaded: loaded (/etc/rc.d/init.d/sshd; bad; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2023-08-06 20:39:07 CST; 7s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 32628 ExecStop=/etc/rc.d/init.d/sshd stop (code=exited, status=0/SUCCESS)
  Process: 32668 ExecStart=/etc/rc.d/init.d/sshd start (code=exited, status=1/FAILURE)
 Main PID: 1029 (code=exited, status=0/SUCCESS)

Aug 06 20:39:07 mysql8test sshd[32668]: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Aug 06 20:39:07 mysql8test sshd[32668]: Permissions 0640 for '/etc/ssh/ssh_host_ed25519_key' are too open.
Aug 06 20:39:07 mysql8test sshd[32668]: It is required that your private key files are NOT accessible by others.
Aug 06 20:39:07 mysql8test sshd[32668]: This private key will be ignored.
Aug 06 20:39:07 mysql8test sshd[32668]: sshd: no hostkeys available -- exiting.
Aug 06 20:39:07 mysql8test sshd[32668]: [FAILED]
Aug 06 20:39:07 mysql8test systemd[1]: sshd.service: control process exited, code=exited status=1
Aug 06 20:39:07 mysql8test systemd[1]: Failed to start SYSV: OpenSSH server daemon.
Aug 06 20:39:07 mysql8test systemd[1]: Unit sshd.service entered failed state.
Aug 06 20:39:07 mysql8test systemd[1]: sshd.service failed.
[root@mysql8test x86_64]# 


##修改文件权限

chmod 600 /etc/ssh/ssh_host_rsa_key
chmod 600 /etc/ssh/ssh_host_ecdsa_key
chmod 600 /etc/ssh/ssh_host_ed25519_key

[root@mysql8test x86_64]# chmod 600 /etc/ssh/ssh_host_rsa_key
[root@mysql8test x86_64]# chmod 600 /etc/ssh/ssh_host_ecdsa_key
[root@mysql8test x86_64]# chmod 600 /etc/ssh/ssh_host_ed25519_key


##再次重启sshd，正常
[root@mysql8test x86_64]# systemctl restart sshd
[root@mysql8test x86_64]# systemctl status sshd.service
● sshd.service - SYSV: OpenSSH server daemon
   Loaded: loaded (/etc/rc.d/init.d/sshd; bad; vendor preset: enabled)
   Active: active (running) since Sun 2023-08-06 20:40:10 CST; 3s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 32628 ExecStop=/etc/rc.d/init.d/sshd stop (code=exited, status=0/SUCCESS)
  Process: 32689 ExecStart=/etc/rc.d/init.d/sshd start (code=exited, status=0/SUCCESS)
 Main PID: 32697 (sshd)
   CGroup: /system.slice/sshd.service
           └─32697 sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups

Aug 06 20:40:10 mysql8test systemd[1]: Starting SYSV: OpenSSH server daemon...
Aug 06 20:40:10 mysql8test sshd[32689]: /sbin/restorecon:  lstat(/etc/ssh/ssh_host_dsa_key.pub) failed:  No such file or directory
Aug 06 20:40:10 mysql8test sshd[32697]: Server listening on 0.0.0.0 port 22.
Aug 06 20:40:10 mysql8test sshd[32697]: Server listening on :: port 22.
Aug 06 20:40:10 mysql8test sshd[32689]: Starting sshd:[  OK  ]
Aug 06 20:40:10 mysql8test systemd[1]: Started SYSV: OpenSSH server daemon.
[root@mysql8test x86_64]#

四、Centos7.9 openssh 9.3p1升级到openssh 9.3p2


[root@ucsp-rancher-03 openssh9.3p2]# ssh -V
OpenSSH_9.3p1, OpenSSL 1.0.2k-fips  26 Jan 2017
[root@ucsp-rancher-03 openssh9.3p2]# 
[root@ucsp-rancher-03 openssh9.3p2]# cp -r /etc/ssh /etc/ssh.bak
cp -r /etc/pam.d /etc/pam.d.bak
[root@ucsp-rancher-03 openssh9.3p2]# cp -r /etc/pam.d /etc/pam.d.bak
cp /etc/pam.d/sshd /root/sshd
[root@ucsp-rancher-03 openssh9.3p2]# cp /etc/pam.d/sshd /root/sshd
[root@ucsp-rancher-03 openssh9.3p2]# 
[root@ucsp-rancher-03 openssh9.3p2]# yum localinstall openssh-9.3p2-1.el7.x86_64.rpm openssh-clients-9.3p2-1.el7.x86_64.rpm openssh-server-9.3p2-1.el7.x86_64.rpm -y
已加载插件：fastestmirror, langpacks
正在检查 openssh-9.3p2-1.el7.x86_64.rpm: openssh-9.3p2-1.el7.x86_64
openssh-9.3p2-1.el7.x86_64.rpm 将作为 openssh-9.3p1-1.el7.x86_64 的更新
正在检查 openssh-clients-9.3p2-1.el7.x86_64.rpm: openssh-clients-9.3p2-1.el7.x86_64
openssh-clients-9.3p2-1.el7.x86_64.rpm 将作为 openssh-clients-9.3p1-1.el7.x86_64 的更新
正在检查 openssh-server-9.3p2-1.el7.x86_64.rpm: openssh-server-9.3p2-1.el7.x86_64
openssh-server-9.3p2-1.el7.x86_64.rpm 将作为 openssh-server-9.3p1-1.el7.x86_64 的更新
正在解决依赖关系
--> 正在检查事务
---> 软件包 openssh.x86_64.0.9.3p1-1.el7 将被 升级
---> 软件包 openssh.x86_64.0.9.3p2-1.el7 将被 更新
---> 软件包 openssh-clients.x86_64.0.9.3p1-1.el7 将被 升级
---> 软件包 openssh-clients.x86_64.0.9.3p2-1.el7 将被 更新
---> 软件包 openssh-server.x86_64.0.9.3p1-1.el7 将被 升级
---> 软件包 openssh-server.x86_64.0.9.3p2-1.el7 将被 更新
--> 解决依赖关系完成
base/7/x86_64                                                                                                                                                                                  | 3.6 kB  00:00:00     
centosplus/7/x86_64                                                                                                                                                                            | 2.9 kB  00:00:00     
epel/7/x86_64                                                                                                                                                                                  | 4.7 kB  00:00:00     
extras/7/x86_64                                                                                                                                                                                | 2.9 kB  00:00:00     
updates/7/x86_64                                                                                                                                                                               | 2.9 kB  00:00:00     

依赖关系解决

======================================================================================================================================================================================================================
 Package                                           架构                                     版本                                          源                                                                     大小
======================================================================================================================================================================================================================
正在更新:
 openssh                                           x86_64                                   9.3p2-1.el7                                   /openssh-9.3p2-1.el7.x86_64                                           2.9 M
 openssh-clients                                   x86_64                                   9.3p2-1.el7                                   /openssh-clients-9.3p2-1.el7.x86_64                                   2.4 M
 openssh-server                                    x86_64                                   9.3p2-1.el7                                   /openssh-server-9.3p2-1.el7.x86_64                                    1.1 M

事务概要
======================================================================================================================================================================================================================
升级  3 软件包

总计：6.4 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  正在更新    : openssh-9.3p2-1.el7.x86_64                                                                                                                                                                        1/6 
  正在更新    : openssh-server-9.3p2-1.el7.x86_64                                                                                                                                                                 2/6 
  正在更新    : openssh-clients-9.3p2-1.el7.x86_64                                                                                                                                                                3/6 
  清理        : openssh-clients-9.3p1-1.el7.x86_64                                                                                                                                                                4/6 
  清理        : openssh-server-9.3p1-1.el7.x86_64                                                                                                                                                                 5/6 
  清理        : openssh-9.3p1-1.el7.x86_64                                                                                                                                                                        6/6 
  验证中      : openssh-server-9.3p2-1.el7.x86_64                                                                                                                                                                 1/6 
  验证中      : openssh-9.3p2-1.el7.x86_64                                                                                                                                                                        2/6 
  验证中      : openssh-clients-9.3p2-1.el7.x86_64                                                                                                                                                                3/6 
  验证中      : openssh-9.3p1-1.el7.x86_64                                                                                                                                                                        4/6 
  验证中      : openssh-clients-9.3p1-1.el7.x86_64                                                                                                                                                                5/6 
  验证中      : openssh-server-9.3p1-1.el7.x86_64                                                                                                                                                                 6/6 

更新完毕:
  openssh.x86_64 0:9.3p2-1.el7                                      openssh-clients.x86_64 0:9.3p2-1.el7                                      openssh-server.x86_64 0:9.3p2-1.el7                                     

完毕！
[root@ucsp-rancher-03 openssh9.3p2]# ssh -V
OpenSSH_9.3p2, OpenSSL 1.0.2k-fips  26 Jan 2017
[root@ucsp-rancher-03 openssh9.3p2]# systemctl restart sshd
[root@ucsp-rancher-03 openssh9.3p2]#
七七powerful
关注
  • 0
    点赞
  • 踩
  • 3
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
网络系统管理Centos7.9部署SSH任务及免密登录
奋斗Zalvin_JE（奋斗Zhy）的个人博客
03-30 652
Centos7.9部署SSH 及免密登录及限制root账户登录
Centos 7.9 升级 OpenSSH 到 openssh-9.4p1及openssl-1.1.1k
weixin_43741718的博客
08-30 7637
Centos 7.9 升级 OpenSSH 到 openssh-9.4p1及openssl-1.1.1k
CentOS升级OpenSSH_9.3p2（RPM升级+源码升级）
qq_42778160的博客
04-28 2702
升级OpenSSH是一个危险系数比较高的操作，一旦出现意外情况，会导致无法ssh登录设备。一定要确保除ssh外 要有其他登录方式能够连接到设备。我这里升级ssh是因为漏扫 扫出来很多openssh相关漏洞，一共73台设备，分为CentOS-8.2、CentOS-7.9。其中7.9系统又包含x86_64架构和ARM（aarch64）架构的系统，环境比较复杂。升级OpenSSH这里有两种方法，一是构建SSH RPM包升级，另一种就是源码编译升级。
升级最新版openssh-9.7p1及openssl-1.1.1h详细步骤及常见问题总结
最新发布
fish332的博客
06-04 3109
近期因为openssh相继被漏洞扫描工具扫出存在漏洞，所以考虑升级操作系统中的openssh和openssl为最新版本，来避免漏洞风险。期间的升级过程及遇到的疑难问题，特此记录下来，供有需要的人参考。
Centos7单机升级OpenSSH版本至9.0p1
hhq850741642的博客
03-17 927
如需其他版本地址：https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/?(2)新建openssh目录，用于存放openssh-9.1p1压缩包,我放在了/root/openssh 目录下。(2)修改/etc/ssh/sshd_config配置文件。(4)删除旧版本的OpenSSH。(1)解压openssh。(1)还原之前的配置文件。
Centos7.9升级openssh9.0
Mico18的博客
11-22 439
Centos7.9升级openssh9.0
linux系统openssh服务版本升级
qq_37297716的博客
03-31 1309
一、下载openssh 1、直接通过ssh连接目标主机进行下载（建议将压缩包下载到 /opt 目录下）： // [root@main1]# wget wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.8p1.tar.gz 如果在执行wget后指令提示 command not found，是因为目标机上没有安装wget指令； wget指令安装 // yum -y install wget 安装成功提示： 2、或者是直接
openssh 9.3p2 centos7.9 rpm升级包
08-06
本篇文章将详细介绍如何在CentOS 7.9上，通过RPM包对OpenSSH进行9.3p2的安全更新，以修复已知的命令注入漏洞(CVE-2020-15778)和最新发现的安全漏洞(CVE-2023-38408)。 首先，我们需要了解这两个漏洞的背景和影响。...
centos7.9的openssh和openssl升级包(openssh-9.4p1和openssl-1.1.1w)
03-02
首先备份原有库文件在进行卸载升级 cp /usr/bin/openssl /usr/bin/openssl-1.0.2k cp /usr/lib64/libcrypto.so....卸载openssh和openssl，包括openssl-libs 然后解压安装 如有lib库文件异常，使用备份的库文件直接恢复
用于升级CentOS7系统openssh-9.7p1的rpm包
04-12
CentOS7离线升级openssh-9.7p1 将openssh-9.7p1的rpm包上传到本地服务器 进入openssh9.7p1文件夹，里面包含openssh-9.7p1升级的rpm包 查看当前openssh的版本 使用yum localinstall openssh-*.rpm 进行更新 授权，...
Centos7openssh9.0rpm包与升级脚本
08-16
RPM包是Red Hat Package Manager的简称，是用于在Linux系统中安装、升级和管理软件的包管理系统。在CentOS 7中，我们可以使用`yum`（或者更新的`dnf`）命令来处理RPM包。`openssh-9.0p1.rpm`这个文件就是OpenSSH 9.0...
Centos7升级OpenSSH版本至9.3p2
08-03
Centos7升级OpenSSH版本至9.3p2
centos7更新openssh7.9
12-07
centos7最新的openssh的安装 执行命令 yum -y --disablerepo=\* localinstall *.rpm /bin/cp -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config sed -i "s/.*PermitRootLogin.*/PermitRootLogin yes/" /etc/ssh/sshd_config chmod 600 -R /etc/ssh/ systemctl restart sshd
OpenSSH升级包、依赖包
08-20
OpenSSH_7.7p1需要依赖ZLIB和OpenSSL，ZLIB是最新版1.2.11，openssl版本是openssl-1.0.2o.
centos openssh 升级安装rpm包
09-06
2018年8月最新7.8p1版本编译，直接运行rpm -Uvh openssh-*.rpm，就可以升级。切记：升级以后可能会无法登陆，不能断开ssh连接，需要修改/etc/ssh/sshd_config的允许登陆方式等配置，确认可以登陆后再断开。
Redhat\Centos7-7.9 openssh升级包，傻瓜式升级包。
07-18
openssh升级包升级至9.0p1最新版本，脚本一键升级。RPM一键安装包，适合Redhat\Centos7-7.9 升级openssh版本，
Centos6.5 openssh 5.4离线 升级为 openssh 7.7，使用rpm包安装
crime_lamb的博客
06-19 925
很多linux 没有gcc c++ 等编译环境，并且处于内网环境，无法通过yum 命令直接安装软件，又由于编译软件所需要的依赖较多，安装起来相当麻烦。所以使用一台可以联网的Linux 将源码打成rpm包，在去内网linux 安装，即可省去内网linux 安装编译环境所带来的的困扰。
Linux服务部署Centos7.9之配置SSH实现远程连接方法过程
lwd2307997664的博客
03-28 4488
Linux服务部署Centos7.9之安装Lixux系统后调优以及安全设置（二） 文章目录Linux服务部署Centos7.9之安装Lixux系统后调优以及安全设置（二）前言一、CentOS7.9配置SSH实现远程连接方法过程二、CentOS7.9服务设置时间同步1、设置时间同步2、查看和设置时区 前言 CentOS7.9配置SSH实现远程连接方法过程、服务器的时间同步操作、 一、CentOS7.9配置SSH实现远程连接方法过程 为什么要更改ssh服务远程登录配置？因为黑客都知道Linux远程连接默认端口
CentOS7 openssh7.9p1安装
weixin_30338481的博客
04-12 347
先安装telnet，以防安装ssh出现问题，无法远程登录设备。 最新版openssh下载地址：http://www.openssh.com/ftp.html 一、安装telnet和xinetd： 1、安装telnet和xinetd systemctl stop firewalld #安装完不要忘了开启防火墙 rpm -qa | grep telnet yum -y instal...
centos7.9 升级OpenSSH
11-08
为了升级CentOS 7.9上的OpenSSH，您可以按照以下步骤进行操作： 1. 确认您的系统是否已经安装了OpenSSH。您可以在终端中输入以下命令来检查： ``` ssh -V ``` 如果您的系统已经安装了OpenSSH，您将看到OpenSSH的版本信息。 2. 确认您的系统是否已经启用了EPEL存储库。如果没有启用，请按照以下步骤启用： ``` sudo yum install epel-release ``` 3. 更新您的系统： ``` sudo yum update ``` 4. 安装最新版本的OpenSSH： ``` sudo yum install openssh ``` 5. 检查OpenSSH的版本信息，以确保它已经更新到最新版本： ``` ssh -V ``` 如果您看到的版本号是最新的，则说明您已经成功地升级了OpenSSH。
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

七七powerful

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值