记录一下linux漏洞修补命令

来源于阿里云服务器漏洞修复提醒

USN-3707-1: NTP 漏洞      

apt-get update && apt-get install ntpdate --only-upgrade

 

USN-3457-1: curl  漏洞  

软件：libcurl3-gnutls 7.35.0-1ubuntu2.3

命中：libcurl3-gnutls version less than 0:7.35.0-1ubuntu2.12

路径：/usr/share/doc/libcurl3-gnutls

命令：apt-get update && apt-get install libcurl3-gnutls --only-upgrade

 

USN-3270-1: NSS漏洞  

软件：libnss3 3.17.4-0ubuntu0.14.04.1

命中：libnss3 version less than 2:3.28.4-0ubuntu0.14.04.1

路径：/usr/share/lintian/overrides/libnss3

软件：libnss3-nssdb 3.17.4-0ubuntu0.14.04.1

命中：libnss3-nssdb version less than 2:3.28.4-0ubuntu0.14.04.1

路径：/usr/share/doc/libnss3-nssdb

命令：apt-get update && apt-get install libnss3 --only-upgrade

命令：apt-get update && apt-get install libnss3-nssdb --only-upgrade

 

USN-2017 krb5 漏洞  

软件：krb5-locales 1.12+dfsg-2ubuntu5.1

命中：krb5-locales version less than 0:1.12+dfsg-2ubuntu5.4

路径：/usr/share/doc/krb5-locales

软件：libkdb5-7 1.12+dfsg-2ubuntu5.1

命中：libkdb5-7 version less than 0:1.12+dfsg-2ubuntu5.4

路径：/usr/share/doc/libkdb5-7

apt-get update && apt-get install krb5-locales --only-upgrade

apt-get update && apt-get install libkdb5-7 --only-upgrade

 

USN-3876-1: Avahi 漏洞   

软件：libavahi-common-data 0.6.31-4ubuntu1

命中：libavahi-common-data version less than 0:0.6.31-4ubuntu1.3

路径：/usr/share/doc/libavahi-common-data

apt-get update && apt-get install libavahi-common-data --only-upgrade

 

USN-2914-1: OpenSSL 漏洞 

软件：libssl1.0.0 1.0.1f-1ubuntu2.11

命中：libssl1.0.0 version less than 0:1.0.1f-1ubuntu2.18

路径：/usr/share/doc/libssl1.0.0

apt-get update && apt-get install libssl1.0.0 --only-upgrade

 

USN-2993-1: Firefox漏洞   

软件：libnss3 3.17.4-0ubuntu0.14.04.1

命中：libnss3 version less than 2:3.23-0ubuntu0.14.04.1

路径：/usr/share/lintian/overrides/libnss3

软件：libnss3-nssdb 3.17.4-0ubuntu0.14.04.1

命中：libnss3-nssdb version less than 2:3.23-0ubuntu0.14.04.1

路径：/usr/share/doc/libnss3-nssdb

apt-get update && apt-get install libnss3 --only-upgrade

apt-get update && apt-get install libnss3-nssdb --only-upgrade

 

USN-3758-1: libx11 漏洞  

软件：libx11-6 1.6.2-1ubuntu2

命中：libx11-6 version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/lintian/overrides/libx11-6

软件：libx11-data 1.6.2-1ubuntu2

命中：libx11-data version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/doc/libx11-data

软件：libx11-xcb1 1.6.2-1ubuntu2

命中：libx11-xcb1 version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/doc/libx11-xcb1

apt-get update && apt-get install libx11-6 --only-upgrade

apt-get update && apt-get install libx11-data --only-upgrade

apt-get update && apt-get install libx11-xcb1 --only-upgrade

 

USN-3767-1: GLib 漏洞  

软件：libglib2.0-0 2.40.2-0ubuntu1

命中：libglib2.0-0 version less than 0:2.40.2-0ubuntu1.1

路径：/usr/share/lintian/overrides/libglib2.0-0

软件：libglib2.0-data 2.40.2-0ubuntu1

命中：libglib2.0-data version less than 0:2.40.2-0ubuntu1.1

路径：/usr/share/doc/libglib2.0-data

apt-get update && apt-get install libglib2.0-0 --only-upgrade

apt-get update && apt-get install libglib2.0-data --only-upgrade

 

USN-2018 intel-microcode 漏洞 

软件：intel-microcode 3.20180807a.0ubuntu0.14.04.1

命中：intel-microcode version less than 0:3.20190514.0ubuntu0.14.04.1

路径：/usr/share/doc/intel-microcode

apt-get update && apt-get install intel-microcode --only-upgrade

 

USN-3068-1: Libidn  

软件：libidn11 1.28-1ubuntu2

命中：libidn11 version less than 0:1.28-1ubuntu2.1

路径：/usr/share/doc/libidn11

apt-get update && apt-get install libidn11 --only-upgrade

 

USN-3212-1: LibTIFF 漏洞  

软件：libtiff5 4.0.3-7ubuntu0.3

命中：libtiff5 version less than 0:4.0.3-7ubuntu0.6

路径：/usr/share/lintian/overrides/libtiff5

 

apt-get update && apt-get install libtiff5 --only-upgrade

 

USN-3686-1: file 漏洞

软件：file 5.14-2ubuntu3.3

命中：file version less than 1:5.14-2ubuntu3.4

路径：/usr/share/doc/file

软件：libmagic1 5.14-2ubuntu3.3

命中：libmagic1 version less than 1:5.14-2ubuntu3.4

路径：/usr/share/doc/libmagic1

 

USN-2018 tiff 漏洞  

软件：libtiff5 4.0.3-7ubuntu0.3

命中：libtiff5 version less than 0:4.0.3-7ubuntu0.9

路径：/usr/share/lintian/overrides/libtiff5

 

USN-3860-1: libcaca 漏洞

软件：libcaca0 0.99.beta18-1ubuntu5

命中：libcaca0 version less than 0:0.99.beta18-1ubuntu5.1

路径：/usr/share/doc/libcaca0

 

apt-get update && apt-get install libcaca0 --only-upgrade

 

USN-2651-1: GNU patch 漏洞

软件：patch 2.7.1-4ubuntu1

命中：patch version less than 0:2.7.1-4ubuntu2.3

路径：/usr/bin/patch

 

apt-get update && apt-get install patch --only-upgrade

 

USN-2698-1: SQLite 漏洞

软件：libsqlite3-0 3.8.2-1ubuntu2

命中：libsqlite3-0 version less than 0:3.8.2-1ubuntu2.1

路径：/usr/share/doc/libsqlite3-0

 

apt-get update && apt-get install libsqlite3-0 --only-upgrade

 

USN-3172-1: Bind 漏洞

apt-get update && apt-get install bind9-host --only-upgrade

apt-get update && apt-get install dnsutils --only-upgrade

apt-get update && apt-get install libbind9-90 --only-upgrade

apt-get update && apt-get install libdns100 --only-upgrade

apt-get update && apt-get install libisc95 --only-upgrade

apt-get update && apt-get install libisccc90 --only-upgrade

apt-get update && apt-get install libisccfg90 --only-upgrade

apt-get update && apt-get install liblwres90 --only-upgrade

 

USN-2017 systemd 漏洞

apt-get update && apt-get install libpam-systemd --only-upgrade

apt-get update && apt-get install libsystemd-daemon0 --only-upgrade

apt-get update && apt-get install libsystemd-login0 --only-upgrade

apt-get update && apt-get install libudev1 --only-upgrade

apt-get update && apt-get install systemd-services --only-upgrade

apt-get update && apt-get install udev --only-upgrade

 

USN-3090-1: Pillow 漏洞

apt-get update && apt-get install python-imaging --only-upgrade

apt-get update && apt-get install python-pil --only-upgrade

 

USN-3139-1: Vim 漏洞

软件：vim 7.4.052-1ubuntu3

命中：vim version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/lintian/overrides/vim

软件：vim-common 7.4.052-1ubuntu3

命中：vim-common version less than 2:7.4.052-1ubuntu3.1

路径：/usr/lib/mime/packages/vim-common

软件：vim-runtime 7.4.052-1ubuntu3

命中：vim-runtime version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/doc/vim-runtime

软件：vim-tiny 7.4.052-1ubuntu3

命中：vim-tiny version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/lintian/overrides/vim-tiny

apt-get update && apt-get install vim --only-upgrade

apt-get update && apt-get install vim-common --only-upgrade

apt-get update && apt-get install vim-runtime --only-upgrade

apt-get update && apt-get install vim-tiny --only-upgrade

 

USN-3283-1: rtmpdump 漏洞

软件：librtmp0 2.4+20121230.gitdf6c518-1

命中：librtmp0 version less than 0:2.4+20121230.gitdf6c518-1ubuntu0.1

路径：/usr/share/doc/librtmp0

apt-get update && apt-get install librtmp0 --only-upgrade

 

USN-2013 isc-dhcp 漏洞

软件：isc-dhcp-client 4.2.4-7ubuntu12

命中：isc-dhcp-client version less than 0:4.2.4-7ubuntu12.3

路径：/usr/share/lintian/overrides/isc-dhcp-client

软件：isc-dhcp-common 4.2.4-7ubuntu12

命中：isc-dhcp-common version less than 0:4.2.4-7ubuntu12.3

路径：/usr/share/lintian/overrides/isc-dhcp-common

apt-get update && apt-get install isc-dhcp-client --only-upgrade

apt-get update && apt-get install isc-dhcp-common --only-upgrade

 

USN-3935-1: BusyBox 漏洞

软件：busybox-initramfs 1.21.0-1ubuntu1

命中：busybox-initramfs version less than 1:1.21.0-1ubuntu1.4

路径：/usr/share/doc/busybox-initramfs

apt-get update && apt-get install busybox-initramfs --only-upgrade

apt-get update && apt-get install busybox-static --only-upgrade

 

USN-2966-1: OpenSSH 漏洞

openssh-client 6.6p1-2ubuntu2

命中：openssh-client version less than 1:6.6p1-2ubuntu2.7

路径：/usr/share/doc/openssh-client

软件：openssh-server 6.6p1-2ubuntu2

命中：openssh-server version less than 1:6.6p1-2ubuntu2.7

路径：/etc/network/if-up.d/openssh-server

软件：openssh-sftp-server 6.6p1-2ubuntu2

命中：openssh-sftp-server version less than 1:6.6p1-2ubuntu2.7

路径：/usr/share/doc/openssh-sftp-server

apt-get update && apt-get install openssh-client --only-upgrade

apt-get update && apt-get install openssh-server --only-upgrade

apt-get update && apt-get install openssh-sftp-server --only-upgrade

 

USN-3156-1: APT 漏洞

apt-get update && apt-get install apt --only-upgrade

apt-get update && apt-get install apt-transport-https --only-upgrade

apt-get update && apt-get install apt-utils --only-upgrade

apt-get update && apt-get install libapt-inst1.5 --only-upgrade

apt-get update && apt-get install libapt-pkg4.12 --only-upgrade

 

USN-2626-1: Qt 漏洞

apt-get update && apt-get install libqt4-dbus --only-upgrade

apt-get update && apt-get install libqt4-declarative --only-upgrade

apt-get update && apt-get install libqt4-designer --only-upgrade

apt-get update && apt-get install libqt4-help --only-upgrade

apt-get update && apt-get install libqt4-network --only-upgrade

apt-get update && apt-get install libqt4-opengl --only-upgrade

apt-get update && apt-get install libqt4-qt3support --only-upgrade

apt-get update && apt-get install libqt4-script --only-upgrade

apt-get update && apt-get install libqt4-scripttools --only-upgrade

apt-get update && apt-get install libqt4-sql --only-upgrade

apt-get update && apt-get install libqt4-sql-mysql --only-upgrade

apt-get update && apt-get install libqt4-svg --only-upgrade

apt-get update && apt-get install libqt4-test --only-upgrade

apt-get update && apt-get install libqt4-xml --only-upgrade

apt-get update && apt-get install libqt4-xmlpatterns --only-upgrade

apt-get update && apt-get install libqtcore4 --only-upgrade

apt-get update && apt-get install libqtdbus4 --only-upgrade

apt-get update && apt-get install libqtgui4 --only-upgrade

apt-get update && apt-get install qdbus --only-upgrade

apt-get update && apt-get install qt4-linguist-tools --only-upgrade

apt-get update && apt-get install qt4-qmake --only-upgrade

apt-get update && apt-get install qtcore4-l10n --only-upgrade

 

USN-3347-1: Libgcrypt 漏洞

软件：gnupg 1.4.16-1ubuntu2.1

命中：gnupg version less than 0:1.4.16-1ubuntu2.6

路径：/usr/lib/gnupg

软件：gpgv 1.4.16-1ubuntu2.1

命中：gpgv version less than 0:1.4.16-1ubuntu2.6

路径：/usr/bin/gpgv

软件：libgcrypt11 1.5.3-2ubuntu4.2

命中：libgcrypt11 version less than 0:1.5.3-2ubuntu4.5

路径：/usr/share/doc/libgcrypt11

apt-get update && apt-get install gnupg --only-upgrade

apt-get update && apt-get install gpgv --only-upgrade

apt-get update && apt-get install libgcrypt11 --only-upgrade

 

USN-2918-1: pixman 漏洞

软件：libpixman-1-0 0.30.2-2ubuntu1

命中：libpixman-1-0 version less than 0:0.30.2-2ubuntu1.1

路径：/usr/share/lintian/overrides/libpixman-1-0

apt-get update && apt-get install libpixman-1-0 --only-upgrade

 

USN-3584-1: sensible-utils 漏洞

软件：sensible-utils 0.0.9

命中：sensible-utils version less than 0:0.0.9ubuntu0.14.04.1

路径：/usr/lib/mime/packages/sensible-utils

apt-get update && apt-get install sensible-utils --only-upgrade

 

USN-3943-1: Wget 漏洞 

软件：wget 1.15-1ubuntu1.14.04.1

命中：wget version less than 0:1.15-1ubuntu1.14.04.5

路径：/usr/bin/wget

 

apt-get update && apt-get install wget --only-upgrade

 

USN-2820-1: dpkg 漏洞

软件：dpkg 1.17.5ubuntu5.3

命中：dpkg version less than 0:1.17.5ubuntu5.5

路径：/etc/cron.daily/dpkg

软件：libdpkg-perl 1.17.5ubuntu5.3

命中：libdpkg-perl version less than 0:1.17.5ubuntu5.5

路径：/usr/share/lintian/overrides/libdpkg-perl

apt-get update && apt-get install dpkg --only-upgrade

apt-get update && apt-get install libdpkg-perl --only-upgrade

 

USN-3353-2: Samba 漏洞

apt-get update && apt-get install libasn1-8-heimdal --only-upgrade

apt-get update && apt-get install libgssapi3-heimdal --only-upgrade

apt-get update && apt-get install libhcrypto4-heimdal --only-upgrade

apt-get update && apt-get install libheimbase1-heimdal --only-upgrade

apt-get update && apt-get install libheimntlm0-heimdal --only-upgrade

apt-get update && apt-get install libhx509-5-heimdal --only-upgrade

apt-get update && apt-get install libkrb5-26-heimdal --only-upgrade

apt-get update && apt-get install libroken18-heimdal --only-upgrade

apt-get update && apt-get install libwind0-heimdal --only-upgrade

 

USN-3841-1: lxml 漏洞

软件：python-lxml 3.3.3-1ubuntu0.1

命中：python-lxml version less than 0:3.3.3-1ubuntu0.2

路径：/usr/share/doc/python-lxml

apt-get update && apt-get install python-lxml --only-upgrade

 

USN-3658-1: procps-ng 漏洞

软件：libprocps3 3.3.9-1ubuntu2.2

命中：libprocps3 version less than 1:3.3.9-1ubuntu2.3

路径：/usr/share/doc/libprocps3

软件：procps 3.3.9-1ubuntu2.2

命中：procps version less than 1:3.3.9-1ubuntu2.3

路径：/usr/bin/w.procps

apt-get update && apt-get install libprocps3 --only-upgrade

apt-get update && apt-get install procps --only-upgrade

 

USN-3246-1: Eject 漏洞

软件：eject 2.1.5+deb1+cvs20081104-13.1

命中：eject version less than 0:2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1

路径：/usr/lib/eject

apt-get update && apt-get install eject --only-upgrade

 

USN-3309-1: Libtasn1 漏洞

软件：libtasn1-6 3.4-3ubuntu0.3

命中：libtasn1-6 version less than 0:3.4-3ubuntu0.5

路径：/usr/share/doc/libtasn1-6

 

apt-get update && apt-get install libtasn1-6 --only-upgrade

 

USN-3309-1: Libtasn1 漏洞

软件：libtasn1-6 3.4-3ubuntu0.3

命中：libtasn1-6 version less than 0:3.4-3ubuntu0.5

路径：/usr/share/doc/libtasn1-6

apt-get update && apt-get install libtasn1-6 --only-upgrade

 

USN-3454-1: libffi 漏洞

软件：libffi6 3.1~rc1+r3.0.13-12

命中：libffi6 version less than 0:3.1~rc1+r3.0.13-12ubuntu0.2

路径：/usr/share/doc/libffi6

 

apt-get update && apt-get install libffi6 --only-upgrade

 

USN-2742-1: OpenLDAP 漏洞

软件：libldap-2.4-2 2.4.31-1+nmu2ubuntu8

命中：libldap-2.4-2 version less than 0:2.4.31-1+nmu2ubuntu8.2

路径：/usr/share/lintian/overrides/libldap-2.4-2

apt-get update && apt-get install libldap-2.4-2 --only-upgrade

 

USN-3247-1: AppArmor 漏洞

软件：apparmor 2.8.95~2430-0ubuntu5.1

命中：apparmor version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/etc/init.d/apparmor

软件：libapparmor-perl 2.8.95~2430-0ubuntu5.1

命中：libapparmor-perl version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/usr/share/doc/libapparmor-perl

软件：libapparmor1 2.8.95~2430-0ubuntu5.1

命中：libapparmor1 version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/usr/share/doc/libapparmor1

apt-get update && apt-get install apparmor --only-upgrade

apt-get update && apt-get install libapparmor-perl --only-upgrade

apt-get update && apt-get install libapparmor1 --only-upgrade

 

USN-3311-1: libnl 漏洞

软件：libnl-3-200 3.2.21-1

命中：libnl-3-200 version less than 0:3.2.21-1ubuntu4.1

路径：/usr/share/doc/libnl-3-200

软件：libnl-genl-3-200 3.2.21-1

命中：libnl-genl-3-200 version less than 0:3.2.21-1ubuntu4.1

路径：/usr/share/doc/libnl-genl-3-200

apt-get update && apt-get install libnl-3-200 --only-upgrade

apt-get update && apt-get install libnl-genl-3-200 --only-upgrade

 

USN-3861-1: PolicyKit 漏洞

软件：libpolkit-gobject-1-0 0.105-4ubuntu2

命中：libpolkit-gobject-1-0 version less than 0:0.105-4ubuntu3.14.04.5

路径：/usr/share/doc/libpolkit-gobject-1-0

apt-get update && apt-get install libpolkit-gobject-1-0 --only-upgrade

 

USN-3183-1: GnuTLS 漏洞

软件：libgnutls-openssl27 2.12.23-12ubuntu2.2

命中：libgnutls-openssl27 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutls-openssl27

软件：libgnutls26 2.12.23-12ubuntu2.2

命中：libgnutls26 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutls26

软件：libgnutlsxx27 2.12.23-12ubuntu2.2

命中：libgnutlsxx27 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutlsxx27

apt-get update && apt-get install libgnutls-openssl27 --only-upgrade

apt-get update && apt-get install libgnutls26 --only-upgrade

apt-get update && apt-get install libgnutlsxx27 --only-upgrade

 

USN-3810-1: ppp 漏洞

软件：ppp 2.4.5-5.1ubuntu2.1

命中：ppp version less than 0:2.4.5-5.1ubuntu2.3

路径：/usr/share/doc/ppp

apt-get update && apt-get install ppp --only-upgrade

 

USN-3861-1: PolicyKit 漏洞

软件：libpolkit-gobject-1-0 0.105-4ubuntu2

命中：libpolkit-gobject-1-0 version less than 0:0.105-4ubuntu3.14.04.5

路径：/usr/share/doc/libpolkit-gobject-1-0

 

apt-get update && apt-get install libpolkit-gobject-1-0 --only-upgrade

 

USN-3183-1: GnuTLS 漏洞

apt-get update && apt-get install libgnutls-openssl27 --only-upgrade

apt-get update && apt-get install libgnutls26 --only-upgrade

apt-get update && apt-get install libgnutlsxx27 --only-upgrade

 

USN-3810-1: ppp 漏洞

软件：ppp 2.4.5-5.1ubuntu2.1

命中：ppp version less than 0:2.4.5-5.1ubuntu2.3

路径：/usr/share/doc/ppp

 

apt-get update && apt-get install ppp --only-upgrade