环境:centos 7
由于OpenSSL 拒绝服务漏洞(CVE-2020-1971)
需要将openssl进行升级
参考网站:https://jingyan.baidu.com/article/08b6a5916ecc5214a9092244.html
1.准备rpm包,从官网下载:http://www.rpmfind.net/linux/rpm2html/search.php
准备预备ssh无法连接从telnet连接的方式.
pam-1.1.8-23.el7.x86_64.rpm
pam-devel-1.1.8-23.el7.x86_64.rpm
systemd-219-78.el7.x86_64.rpm
systemd-libs-219-78.el7.x86_64.rpm
systemd-sysv-219-78.el7.x86_64.rpm
telnet-0.17-65.el7_8.x86_64.rpm
telnet-server-0.17-65.el7_8.x86_64.rpm
xinetd-2.3.15-14.el7.x86_64.rpm
zlib-1.2.7-18.el7.x86_64.rpm
zlib-devel-1.2.7-18.el7.x86_64.rpm
注意:这下rpm包可能随时间更新,版本有所变化,所以还是根据官网下载当时的包。
升级次序
1.1 rpm -Uvh pam-1.1.8-23.el7.x86_64.rpm --nodeps --force
1.2 rpm -Uvh pam-devel-1.1.8-23.el7.x86_64.rpm --nodeps -force
1.3 rpm -Uvh xinetd-2.3.15-14.el7.x86_64.rpm