目录
最近买的腾讯云服务器,提示系统组件漏洞待解决
Sudo 本地提权漏洞(CVE-2021-3156)
1、更新漏洞:
yum update sudo
报错了:
[root@VM-0-11-centos ~]# yum update sudo
error: rpmdb: BDB0113 Thread/process 27871/140170839349312 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 - (-30973)
error: cannot open Packages database in /var/lib/rpm
CRITICAL:yum.main:
Error: rpmdb open failed
问题:强制结束了yum,导致rpm数据库损坏,需要重新构建
2、重新构建步骤:
步骤1:进入rpm目录
[root@VM-0-11-centos ~]# cd /var/lib/rpm/
[root@VM-0-11-centos rpm]# ls
Basenames Conflictname __db.001 __db.002 __db.003 Dirnames Group Installtid Name Obsoletename Packages Providename Requirename Sha1header Sigmd5 Triggername
步骤2:删除损坏文件
[root@VM-0-11-centos rpm]# for i in `ls | grep 'db.'`;do mv $i $i.bak;done
[root@VM-0-11-centos rpm]# ls
Basenames Conflictname __db.001.bak __db.002.bak __db.003.bak Dirnames Group Installtid Name Obsoletename Packages Providename Requirename Sha1header Sigmd5 Triggername
步骤3:重新build
[root@VM-0-11-centos rpm]# rpm --rebuilddb
步骤4:清楚yum缓存
[root@VM-0-11-centos rpm]# yum clean all
Loaded plugins: fastestmirror, langpacks
Repodata is over 2 weeks old. Install yum-cron? Or run: yum makecache fast
Cleaning repos: docker-ce-stable elrepo epel extras kubernetes os updates
Cleaning up list of fastest mirrors
Other repos take up 9.6 M of disk space (use --verbose for details)
3、再次更新漏洞:
成功!!!
[root@VM-0-11-centos rpm]# yum update sudo
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
* elrepo: mirrors.tuna.tsinghua.edu.cn
docker-ce-stable | 3.5 kB 00:00:00
elrepo | 3.0 kB 00:00:00
epel | 4.7 kB 00:00:00
extras | 2.9 kB 00:00:00
kubernetes | 1.4 kB 00:00:00
os | 3.6 kB 00:00:00
updates | 2.9 kB 00:00:00
docker-ce-stable/x86_64/primar FAILED
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found ] 0.0 B/s | 0 B --:--:-- ETA
Trying other mirror.
To address this issue please refer to the below wiki article
https://wiki.centos.org/yum-errors
If above article doesn't help to resolve this issue please use https://bugs.centos.org/.
docker-ce-stable/x86_64/primar FAILED
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found ] 0.0 B/s | 0 B --:--:-- ETA
Trying other mirror.
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
kubernetes 633/633
Resolving Dependencies
--> Running transaction check
---> Package sudo.x86_64 0:1.8.23-4.el7_7.2 will be updated
---> Package sudo.x86_64 0:1.8.23-10.el7_9.1 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
============================================================================================================================================================================================================================================
Package Arch Version Repository Size
============================================================================================================================================================================================================================================
Updating:
sudo x86_64 1.8.23-10.el7_9.1 updates 843 k
Transaction Summary
============================================================================================================================================================================================================================================
Upgrade 1 Package
Total download size: 843 k
Is this ok [y/d/N]: y
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
sudo-1.8.23-10.el7_9.1.x86_64.rpm | 843 kB 00:00:01
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : sudo-1.8.23-10.el7_9.1.x86_64 1/2
Cleanup : sudo-1.8.23-4.el7_7.2.x86_64 2/2
Verifying : sudo-1.8.23-10.el7_9.1.x86_64 1/2
Verifying : sudo-1.8.23-4.el7_7.2.x86_64 2/2
Updated:
sudo.x86_64 0:1.8.23-10.el7_9.1
Complete!