linux更新openssl rpm,RPM升级OPENSSH和OPENSSL

使用RPM升级OPENSSL、OPENSSH目的:不更新系统情况下，升级软件版本修复漏洞

查看当前系统版本

[root@localhost openssl]# cat /etc/redhat-release

CentOS Linux release 7.0.1406 (Core)

查看当前软件版本

[root@localhost ~]# ssh -V

OpenSSH_6.4p1, OpenSSL 1.0.1e-fips 11 Feb 2013

升级OPENSSL

需要下载的RPM包如下:

dracut-033-535.el7.x86_64.rpm

krb5-devel-1.15.1-19.el7.x86_64.rpm

libselinux-utils-2.5-12.el7.x86_64.rpm

pcre-8.32-17.el7.x86_64.rpm

dracut-config-rescue-033-535.el7.x86_64.rpm

krb5-libs-1.15.1-19.el7.x86_64.rpm

libsepol-2.5-8.1.el7.x86_64.rpm

pcre-devel-8.32-17.el7.x86_64.rpm

dracut-network-033-535.el7.x86_64.rpm libcom_err-1.42.9-12.el7_5.x86_64.rpm

libsepol-devel-2.5-8.1.el7.x86_64.rpm

systemd-219-57.el7.x86_64.rpm

e2fsprogs-1.42.9-12.el7_5.x86_64.rpm

libcom_err-devel-1.42.9-12.el7_5.x86_64.rpm libss-1.42.9-12.el7_5.x86_64.rpm

systemd-libs-219-57.el7.x86_64.rpm

e2fsprogs-libs-1.42.9-12.el7_5.x86_64.rpm

libgudev1-219-57.el7.x86_64.rpm

libverto-devel-0.2.5-4.el7.x86_64.rpm

systemd-python-219-57.el7.x86_64.rpm

glib2-2.54.2-2.el7.x86_64.rpm

libkadm5-1.15.1-19.el7.x86_64.rpm

lz4-1.7.5-2.el7.x86_64.rpm

systemd-sysv-219-57.el7.x86_64.rpm

initscripts-9.49.41-1.el7.x86_64.rpm

libselinux-2.5-12.el7.x86_64.rpm

openssl-1.0.2k-12.el7.x86_64.rpm

zlib-1.2.7-17.el7.x86_64.rpm

keyutils-libs-devel-1.5.8-3.el7.x86_64.rpm

libselinux-devel-2.5-12.el7.x86_64.rpm

openssl-devel-1.0.2k-12.el7.x86_64.rpm

zlib-devel-1.2.7-17.el7.x86_64.rpm

kmod-20-21.el7.x86_64.rpm

libselinux-python-2.5-12.el7.x86_64.rpm

openssl-libs-1.0.2k-12.el7.x86_64.rpm

在/home下创建openssl目录

[root@localhost home]# mkdir openssl

将RPM包上传到/home/openssl下

[root@localhost home]# rpm *.rpm --nodeps

忽略的是升级centos版本到7.5

升级openssh需要的RPM包

libsemanage-2.5-11.el7.x86_64.rpm

openssh-server-7.4p1-16.el7.x86_64.rpm

selinux-policy-targeted-3.13.1-192.el7_5.3.noarch.rpm

openssh-7.4p1-16.el7.x86_64.rpm

policycoreutils-2.5-22.el7.x86_64.rpm

openssh-clients-7.4p1-16.el7.x86_64.rpm

selinux-policy-3.13.1-192.el7_5.3.noarch.rpm

在/home下创建openssh目录

[root@localhost home]# mkdir openssh

将RPM包上传到/home/openssh下

[root@localhost home]# rpm *.rpm

升级完成重启

[root@localhost ssh]# ssh -V

OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017