Linux漏洞处理

wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.2p1.tar.gz
wget http://www.zlib.net/zlib1211.zip
wget https://www.openssl.org/source/openssl-1.1.1f.tar.gz
------------------------------------------------------------
[root@kolla mySSH]# yum -y install gcc gcc-c++ kernel-devel
[root@kolla mySSH]# tar -zxvf openssh-8.2p1.tar.gz
[root@kolla mySSH]# tar -zxvf openssl-1.1.1f.tar.gz 
[root@kolla mySSH]# unzip zlib1211.zip 
[root@kolla mySSH]# cd zlib-1.2.11/
[root@kolla zlib-1.2.11]# ./configure --prefix=/usr/local
[root@kolla zlib-1.2.11]# make && make install
------------------------------------------------------------
yum remove openssl 
rm -rf /etc/ssl
cd ../openssl-1.1.1f
 ./config  --prefix=/usr/local --openssldir=/usr/local/ssl
make && make install

./config shared --prefix=/usr/local --openssldir=/usr/local/ssl
make clean
make && make install

[root@istio usr]# find ./ -name libssl.so*
./lib64/libssl.so.10
./lib64/libssl.so.1.0.2k
./local/lib64/libssl.so.1.1
./local/lib64/libssl.so

[root@istio usr]# ln -s /usr/local/lib64/libssl.so.1.1 /usr/lib64/libssl.so.1.1
[root@istio usr]# ln -s /usr/local/lib64/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1

------------------------------------------------------------

[root@kolla openssl-1.1.1f]# cd ../openssh-8.2p1
[root@kolla openssh-8.2p1]# ./configure -prefix=/usr/local/ -sysconfdir=/etc/ssh -with-ssl-dir=/usr/local/ssl
[root@kolla openssh-8.2p1]# ./configure -prefix=/usr/local/myssh -sysconfdir=/etc/ssh -with-ssl-dir=/usr/local/ssl
[root@kolla openssh-8.2p1]# make && make install

[root@istio init.d]#  sudo chmod 755 startmyssh.sh
[root@istio init.d]# cat startmyssh.sh 
sudo /etc/init.d/ssh stop
sudo /usr/local/myssh/sbin/sshd
exit 0
[root@istio init.d]#