OpenSSH code issue vulnerability (CVE-2023-38408) upgraded to the latest version

1. Problem description A missed scan found that the SSH version in the system was too low and there were vulnerabilities. An OpenSSH code issue vulnerability (CVE-2023-38408) warning was reported; CVE-2023-38408 is a remote code execution vulnerability located in the forwarding function of ssh-agent. within, especially when it comes to providing PKCS#11 related services. Under […]

centos7 upgrade openssh9.3p1

centos7 upgrade openssh9.3p1 Make rpm package Install dependency packages yum install -y rpm-build gcc gcc-c + + glibc glibc-devel openssl-devel openssl pcre-devel zlib zlib-devel make wget krb5-devel pam-devel libX11-devel xmkmf libXt-devel initscripts libXt-devel imake gtk2-devel lrzsz Create rpm-related directories mkdir -pv /root/rpmbuild/{BUILD,BUILDROOT,RPMS,SOURCES,SPECS,SRPMS} Download openssh and x11-ssh-askpass installation package cd /root/rpmbuild/SOURCES/ wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-9.3p1.tar.gz tar -xf openssh-9.3p1.tar.gz […]

Centos7 offline upgrade openssh to 9.3p1

Reference: https://blog.csdn.net/qq_29768197/article/details/125048720 Reference: https://blog.csdn.net/weixin_46739058/article/details/129189927 Reference: https://blog.csdn.net/vipee1/article/details/127264883 1. Official download address: http://www.zlib.net/ zlib-1.2.12.tar.gz wget http://www.zlib.net/zlib-1.2.13.tar.gz 2. Official download address: https://www.openssl.org/source/ openssl-1.1.1u.tar.gz wget https://www.openssl.org/source/openssl-1.1.1u.tar.gz 3. Official download address: http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ openssh-9.3p1.tar.gz wget http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.3p1.tar.gz 4. Decompress tar zxvf /root/zlib-1.2.13.tar.gz tar zxvf /root/openssl-1.1.1u.tar.gz tar zxvf /root/openssh-9.3p1.tar.gz 5. Install gcc (install it if you don’t have it). Download address reference: https://blog.csdn.net/vipee1/article/details/127264883 […]

SD3403, HI3559, arm cross-compilation, arm adds sshd and sftp services, zlib, openssl, openssh, haveged

Already used on zynq, hi3519, hi3559, SD3403 and other types of chips Download the required resources zlib, openssl, openssh, haveged The version I downloaded Decompress tar -zxvf openssl-3.1.2.tar.gz tar -zxvf openssh-9.4p1.tar.gz tar -zxvf haveged-1.9.2.tar.gz Then create the installation folder after compilation. Note that openssh does not need to create get Start configuration and compilation. Compile […]

Compile the OpenSSHV9.4rpm installation package for CentOS6.10 system

The current OpenSSH version has reached 9.4. As the underlying management platform software of the operating system, it needs to be kept updated to avoid security attacks. Compiling and generating rpm packages is the best way to batch upgrade in a production environment. When compiling the software package, it has a lot to do with […]

Centos network update OpenSSH_9.4p1, OpenSSL 1.1.1s (with script)

OpenSSH security vulnerability (CVE-2023-38408) fixed The upgrade script comes from GitHub, with slight version number adjustments. #!/bin/bash clear export LANG=”en_US.UTF-8″ #update.fix.2023-09-05 #Script variables DATE=`date ” + %Y%m%d”` PREFIX=”/usr/local” PERL_VERSION=”5.37.5″ OPENSSL_VERSION=”openssl-1.1.1s” OPENSSH_VERSION=”openssh-9.4p1″ DROPBEAR_VERSION=”dropbear-2022.83″ PERL_DOWNLOAD=”https://www.cpan.org/src/5.0/perl-$PERL_VERSION.tar.gz” OPENSSL_DOWNLOAD=”https://www.openssl.org/source/$OPENSSL_VERSION.tar.gz” #https://mirrors.aliyun.com/openssh/portable/openssh-9.1p1.tar.gz #OPENSSH_DOWNLOAD=”https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/$OPENSSH_VERSION.tar.gz” OPENSSH_DOWNLOAD=”https://mirrors.aliyun.com/openssh/portable/$OPENSSH_VERSION.tar.gz” DROPBEAR_DOWNLOAD=”https://matt.ucc.asn.au/dropbear/releases/$DROPBEAR_VERSION.tar.bz2″ DROPBEAR_PORT=”6666″ OPENSSH_RPM_INSTALLED=$(rpm -qa | grep ^openssh | wc -l) SYSTEM_VERSION=$(cat /etc/redhat-release | sed -r ‘s/.* ([0-9] + […]

yum management&openssh-

Using yum tool and ssh Disadvantages of rpm When using rpm to install software, if you encounter software with dependencies, you need to install the dependent software first before you can install the software that needs to be installed. It doesn’t matter if you have one or two. Once there are more dependencies, rpm installation […]

Centos 7.9 upgrades OpenSSH to openssh-9.4p1 and openssl-1.1.1k

Centos 7.9 upgrades OpenSSH to openssh-9.4p1 and openssl-1.1.1k Note: Upgrading ssh to openssh-9.4p1 requires openssl-1.1.1 and above! ! ! 1. Upgrade openssl to openssl-1.1.1k 1.Basic environment First, install the basic dependency packages yum install -y gcc gcc-c + + glibc make autoconf openssl openssl-devel pcre-devel pam-devel wget vim unzip lrzsz yum install -y pam* zlib* […]