Centos7关于curl和glibc修复

Centos 7漏洞

[root@al-bj2-webs01 ~]# rpm -qa|grep curl
python-pycurl-7.19.0-19.el7.x86_64
libcurl-devel-7.29.0-46.el7.x86_64
curl-7.29.0-46.el7.x86_64 这个版本存在漏洞
libcurl-7.29.0-46.el7.x86_64

软件: crul
命中: curl version less than 0:7.29.0-51.el7
路径: /usr/bin/curl

软件: 7.29.0-46.el7
命中: libcurl version less than 0:7.29.0-51.el7
路径: /usr/lib64/libcurl.so.4

软件: 7.29.0-46.el7
命中: libcurl-devel version less than 0:7.29.0-51.el7
路径: /usr/bin/curl-config

软件: 1.0.3-4.el7
命中: nss-pem version less than 0:1.0.3-5.el7
路径: /usr/lib64/libnsspem.so
修复
yum update curl
yum update libcurl
yum update libcurl-devel
yum update nss-pem

[root@al-bj2-webs01 ~]# rpm -qa|grep glibc
glibc-common-2.17-222.el7.x86_64
glibc-headers-2.17-222.el7.x86_64
glibc-devel-2.17-222.el7.x86_64
glibc-2.17-222.el7.x86_64 这版本存在问题

软件: glibc 2.17-222.el7
命中: glibc version less than 0:2.17-260.el7
路径: /etc/gai.conf

命中: glibc-common version less than 0:2.17-260.el7
路径: /etc/default

命中: glibc-devel version less than 0:2.17-260.el7
路径: /usr/include/gnu/stubs-64.h

命中: glibc-headers version less than 0:2.17-260.el7
路径: /usr/include/_G_config.h

命中: nscd version less than 0:2.17-260.el7
路径: /etc/nscd.conf
修复
yum update glibc
yum update glibc-common
yum update glibc-devel
yum update glibc-headers
yum update nscd

转载于:https://blog.51cto.com/zhangchengjie/2326454