Linux 更新

CESA-2024:0346: 内核 安全更新

修复命令：

yum update kernel-headers
 
yum update kernel
 
yum update python-perf
 
yum update kernel-tools
 
yum update kernel-tools-libs

软件：kernel-headers 3.10.0-1160.105.1.el7

命中：kernel-headers version less than 3.10.0-1160.108.1.el7

路径：/usr/include/asm

软件：kernel 3.10.0-1160.105.1.el7 需要重启

命中：kernel version less than 3.10.0-1160.108.1.el7

路径：/boot/.vmlinuz-3.10.0-1160.105.1.el7.x86_64.hmac

软件：python-perf 3.10.0-1160.105.1.el7

命中：python-perf version less than 3.10.0-1160.108.1.el7

路径：/usr/lib64/python2.7/site-packages

软件：kernel-tools 3.10.0-1160.105.1.el7

命中：kernel-tools version less than 3.10.0-1160.108.1.el7

路径：/etc/sysconfig/cpupower

软件：kernel-tools-libs 3.10.0-1160.105.1.el7

命中：kernel-tools-libs version less than 3.10.0-1160.108.1.el7

路径：/usr/lib64/libcpupower.so.0

RHSA-2023:5691: bind 安全更新

修复命令：

yum update kernel-headers
 
yum update kernel
 
yum update python-perf
 
yum update kernel-tools
 
yum update kernel-tools-libs

软件：bind-libs-lite 9.11.4-26.P2.el7_9.14

命中：bind-libs-lite version less than 9.11.4-26.P2.el7_9.15

路径：/usr/lib64/libdns.so.1102

软件：bind-license 9.11.4-26.P2.el7_9.14

命中：bind-license version less than 9.11.4-26.P2.el7_9.15

路径：/usr/share/licenses/bind-license-9.11.4

软件：bind-export-libs 9.11.4-26.P2.el7_9.14

命中：bind-export-libs version less than 9.11.4-26.P2.el7_9.15

路径：/etc/ld.so.conf.d/bind-export-x86_64.conf

软件：bind-libs 9.11.4-26.P2.el7_9.14

命中：bind-libs version less than 9.11.4-26.P2.el7_9.15

路径：/usr/lib64/libbind9.so.160

软件：bind-utils 9.11.4-26.P2.el7_9.14

命中：bind-utils version less than 9.11.4-26.P2.el7_9.15

路径：/etc/trusted-key.key

RHSA-2023:4382: openssh 安全更新

修复命令：

yum update openssh-clients

yum update openssh-server

yum update openssh

软件：openssh-clients 7.4p1-12.el7_4

命中：openssh-clients version less than 7.4p1-23.el7_9

路径：/etc/ssh/ssh_config

软件：openssh-server 7.4p1-12.el7_4

命中：openssh-server version less than 7.4p1-23.el7_9

路径：/etc/pam.d/sshd

软件：openssh 7.4p1-12.el7_4

命中：openssh version less than 7.4p1-23.el7_9

路径：/etc/ssh

CESA-2018:0014: linux-firmware 安全更新

修复命令：

yum update iwl1000-firmware

yum update iwl7260-firmware

yum update iwl3945-firmware

yum update iwl105-firmware

yum update iwl3160-firmware

yum update iwl2000-firmware

yum update iwl6000g2a-firmware

yum update iwl6050-firmware

yum update iwl5000-firmware

yum update iwl6000-firmware

yum update iwl5150-firmware

yum update iwl100-firmware

yum update iwl4965-firmware

yum update iwl2030-firmware

yum update iwl135-firmware

yum update iwl6000g2b-firmware

软件：iwl1000-firmware 39.31.5.1-56.el7

命中：iwl1000-firmware version less than 39.31.5.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-1000-3.ucode

软件：iwl7260-firmware 22.0.7.0-56.el7

命中：iwl7260-firmware version less than 25.30.13.0-81.el7_9

路径：/usr/lib/firmware/iwlwifi-7260-10.ucode

软件：iwl3945-firmware 15.32.2.9-56.el7

命中：iwl3945-firmware version less than 15.32.2.9-81.el7_9

路径：/usr/lib/firmware/iwlwifi-3945-2.ucode

软件：iwl105-firmware 18.168.6.1-56.el7

命中：iwl105-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-105-6.ucode

软件：iwl3160-firmware 22.0.7.0-56.el7

命中：iwl3160-firmware version less than 25.30.13.0-81.el7_9

路径：/usr/lib/firmware/iwlwifi-3160-10.ucode

软件：iwl2000-firmware 18.168.6.1-56.el7

命中：iwl2000-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-2000-6.ucode

软件：iwl6000g2a-firmware 17.168.5.3-56.el7

命中：iwl6000g2a-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-6000g2a-5.ucode

软件：iwl6050-firmware 41.28.5.1-56.el7

命中：iwl6050-firmware version less than 41.28.5.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-6050-4.ucode

软件：iwl5000-firmware 8.83.5.1_1-56.el7

命中：iwl5000-firmware version less than 8.83.5.1_1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-5000-1.ucode

软件：iwl6000-firmware 9.221.4.1-56.el7

命中：iwl6000-firmware version less than 9.221.4.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-6000-4.ucode

软件：iwl5150-firmware 8.24.2.2-56.el7

命中：iwl5150-firmware version less than 8.24.2.2-81.el7_9

路径：/usr/lib/firmware/iwlwifi-5150-2.ucode

软件：iwl100-firmware 39.31.5.1-56.el7

命中：iwl100-firmware version less than 39.31.5.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-100-5.ucode

软件：iwl4965-firmware 228.61.2.24-56.el7

命中：iwl4965-firmware version less than 228.61.2.24-81.el7_9

路径：/usr/lib/firmware/iwlwifi-4965-2.ucode

软件：iwl2030-firmware 18.168.6.1-56.el7

命中：iwl2030-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-2030-6.ucode

软件：iwl135-firmware 18.168.6.1-56.el7

命中：iwl135-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-135-6.ucode

软件：iwl6000g2b-firmware 17.168.5.2-56.el7

命中：iwl6000g2b-firmware version less than 18.168.6.1-81.el7_9

路径：/usr/lib/firmware/iwlwifi-6000g2b-5.ucode

RHSA-2023:5615: libssh2 安全更新

修复命令：

yum update libssh2

影响说明

软件：libssh2 1.4.3-10.el7_2.1

命中：libssh2 version less than 1.8.0-4.el7_9.1

路径：/usr/lib64/libssh2.so.1

RHSA-2023:6885: python 安全更新

修复命令：

yum update python-libs

yum update python

影响说明

软件：python-libs 2.7.5-58.el7

命中：python-libs version less than 2.7.5-94.el7_9

路径：/etc/python

软件：python 2.7.5-58.el7

命中：python version less than 2.7.5-94.el7_9

路径：/usr/bin/pydoc

RHSA-2023:4766: cups 安全更新

修复命令：

yum update cups-client

yum update cups-libs

影响说明

软件：cups-client 1.6.3-29.el7

命中：cups-client version less than 1.6.3-52.el7_9

路径：/usr/bin/cancel.cups

软件：cups-libs 1.6.3-29.el7

命中：cups-libs version less than 1.6.3-52.el7_9

路径：/usr/lib64/libcups.so.2

CESA-2023:1095: zlib 安全更新

yum update zlib

影响说明

软件：zlib 1.2.7-17.el7

命中：zlib version less than 1.2.7-21.el7_9

路径：/usr/lib64/libz.so.1

CESA-2023:0291: sudo 安全更新

修复命令：

yum update sudo

影响说明

软件：sudo 1.8.19p2-11.el7_4

命中：sudo version less than 1.8.23-10.el7_9.3

路径：/etc/pam.d/sudo

CESA-2023:1332: nss 安全更新

修复命令：

yum update nss

yum update nss-sysinit

yum update nss-tools

影响说明

软件：nss 3.28.4-12.el7_4

命中：nss version less than 3.79.0-5.el7_9

路径：/etc/pki/nss-legacy

软件：nss-sysinit 3.28.4-12.el7_4

命中：nss-sysinit version less than 3.79.0-5.el7_9

路径：/usr/bin/setup-nsssysinit

软件：nss-tools 3.28.4-12.el7_4

命中：nss-tools version less than 3.79.0-5.el7_9

路径：/usr/bin/certutil

RHSA-2022:8900: grub2 安全更新

修复命令：

yum update grub2-tools-extra

yum update grub2-common

yum update grub2-tools-minimal

yum update grub2-pc-modules

yum update grub2

yum update grub2-tools

yum update grub2-pc

影响说明

软件：grub2-tools-extra 2.02-0.64.el7.centos

命中：grub2-tools-extra version less than 2.02-0.87.0.1.el7.centos.11

路径：/etc/sysconfig/grub

软件：grub2-common 2.02-0.64.el7.centos

命中：grub2-common version less than 2.02-0.87.0.1.el7.centos.11

路径：/boot/efi/EFI/centos

软件：grub2-tools-minimal 2.02-0.64.el7.centos

命中：grub2-tools-minimal version less than 2.02-0.87.0.1.el7.centos.11

路径：/etc/prelink.conf.d/grub2.conf

软件：grub2-pc-modules 2.02-0.64.el7.centos

命中：grub2-pc-modules version less than 2.02-0.87.0.1.el7.centos.11

路径：/usr/lib/grub/i386-pc

软件：grub2 2.02-0.64.el7.centos

命中：grub2 version less than 2.02-0.87.0.1.el7.centos.11

软件：grub2-tools 2.02-0.64.el7.centos

命中：grub2-tools version less than 2.02-0.87.0.1.el7.centos.11

路径：/etc/default/grub

软件：grub2-pc 2.02-0.64.el7.centos

命中：grub2-pc version less than 2.02-0.87.0.1.el7.centos.11

路径：/boot/grub2/grub.cfg

RHSA-2019:3197: sudo 安全更新

修复命令：

yum update sudo

软件：sudo 1.8.19p2-11.el7_4

命中：sudo version less than 1.8.23-4.el7_7.1

路径：/etc/pam.d/sudo

RHSA-2023:7743: curl 安全更新

修复命令：

yum update curl

yum update libcurl

影响说明

软件：curl 7.29.0-42.el7

命中：curl version less than 7.29.0-59.el7_9.2

路径：/usr/bin/curl

软件：libcurl 7.29.0-42.el7

命中：libcurl version less than 7.29.0-59.el7_9.2

路径：/usr/lib64/libcurl.so.4

RHSA-2022:5052: xz 安全更新

修复命令：

yum update xz

yum update xz-libs

影响说明

软件：xz 5.2.2-1.el7

命中：xz version less than 5.2.2-2.el7_9

路径：/usr/bin/unxz

软件：xz-libs 5.2.2-1.el7

命中：xz-libs version less than 5.2.2-2.el7_9

路径：/usr/lib/liblzma.so.5

RHSA-2022:0666: cyrus-sasl 安全更新

修复命令：

yum update cyrus-sasl-lib

影响说明

软件：cyrus-sasl-lib 2.1.26-21.el7

命中：cyrus-sasl-lib version less than 2.1.26-24.el7_9

路径：/etc/sasl2

RHSA-2022:4803: rsyslog 安全更新

修复命令：

yum update rsyslog

影响说明

软件：rsyslog 8.24.0-12.el7

命中：rsyslog version less than 8.24.0-57.el7_9.3

路径：/etc/logrotate.d/syslog

RHSA-2022:1069: expat 安全更新

修复命令：

yum update expat

影响说明

软件：expat 2.1.0-10.el7_3

命中：expat version less than 2.1.0-14.el7_9

路径：/usr/bin/xmlwf

RHSA-2022:2191: gzip 安全更新

修复命令：

yum update gzip

影响说明

软件：gzip 1.5-9.el7

命中：gzip version less than 1.5-11.el7_9

路径：/usr/bin/gunzip

RHSA-2021:4033: binutils 安全更新

修复命令：

yum update binutils

影响说明

软件：binutils 2.25.1-32.base.el7_4.1

命中：binutils version less than 2.27-44.base.el7_9.1

路径：/usr/bin/addr2line

RHSA-2023:5615: libssh2 安全更新

修复命令：

yum update libssh2

影响说明

软件：libssh2 1.4.3-10.el7_2.1

命中：libssh2 version less than 1.8.0-4.el7_9.1

路径：/usr/lib64/libssh2.so.1

RHSA-2019:2091: systemd security,bug fix,和 enhancement update

修复命令：

yum update libgudev1

yum update systemd

yum update systemd-libs

yum update systemd-sysv

影响说明

软件：libgudev1 219-42.el7_4.1

命中：libgudev1 version less than 219-67.el7

路径：/usr/lib64/girepository-1.0/GUdev-1.0.typelib

软件：systemd 219-42.el7_4.1

命中：systemd version less than 219-67.el7

路径：/etc/X11/xorg.conf.d

软件：systemd-libs 219-42.el7_4.1

命中：systemd-libs version less than 219-67.el7

路径：/usr/lib/libnss_myhostname.so.2

软件：systemd-sysv 219-42.el7_4.1

命中：systemd-sysv version less than 219-67.el7

路径：/usr/bin/systemd-sysv-convert

RHSA-2022:6160: systemd 安全更新

修复命令：

yum update libgudev1

yum update systemd

yum update systemd-libs

yum update systemd-sysv

影响说明

软件：libgudev1 219-42.el7_4.1

命中：libgudev1 version less than 219-78.el7_9.7

路径：/usr/lib64/girepository-1.0/GUdev-1.0.typelib

软件：systemd 219-42.el7_4.1

命中：systemd version less than 219-78.el7_9.7

路径：/etc/X11/xorg.conf.d

软件：systemd-libs 219-42.el7_4.1

命中：systemd-libs version less than 219-78.el7_9.7

路径：/usr/lib/libnss_myhostname.so.2

软件：systemd-sysv 219-42.el7_4.1

命中：systemd-sysv version less than 219-78.el7_9.7

路径：/usr/bin/systemd-sysv-convert

RHSA-2018:3071: krb5 安全和BUG修复更新

修复命令：

yum update krb5-libs

影响说明

软件：krb5-libs 1.15.1-8.el7

命中：krb5-libs version less than 1.15.1-34.el7

路径：/etc/gss

RHSA-2020:1113: bash 安全更新

修复命令：

yum update bash

影响说明

软件：bash 4.2.46-29.el7_4

命中：bash version less than 4.2.46-34.el7

路径：/etc/skel/.bash_logout

CESA-2023:1332: nss 安全更新

修复命令：

yum update nss

yum update nss-sysinit

yum update nss-tools

影响说明

软件：nss 3.28.4-12.el7_4

命中：nss version less than 3.79.0-5.el7_9

路径：/etc/pki/nss-legacy

软件：nss-sysinit 3.28.4-12.el7_4

命中：nss-sysinit version less than 3.79.0-5.el7_9

路径：/usr/bin/setup-nsssysinit

软件：nss-tools 3.28.4-12.el7_4

命中：nss-tools version less than 3.79.0-5.el7_9

路径：/usr/bin/certutil

RHSA-2020:5002: curl 安全更新

修复命令：

yum update curl

yum update libcurl

影响说明

软件：curl 7.29.0-42.el7

命中：curl version less than 7.29.0-59.el7_9.1

路径：/usr/bin/curl

软件：libcurl 7.29.0-42.el7

命中：libcurl version less than 7.29.0-59.el7_9.1

路径：

/usr/lib64/libcurl.so.4