2023年6月25日发(作者：)

银河麒麟V10系统openssh漏洞修复

1. 修复的CVE信息：CVE-2018-15919描述：OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的⼀套⽤于安全访问远程计算机的连接⼯具。该⼯具是SSH协议的开源实现，⽀持对所有的传输进⾏加密，可有效阻⽌窃听、连接劫持以及其他⽹络级的攻击。OpenSSH

CVE-2020-12062描述：OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的⼀套⽤于安全访问远程计算机的连接⼯具。该⼯具是SSH协议的开源实现，⽀持对所有的传输进⾏加密，可有效阻⽌窃听、连接劫持以及其他⽹络级的攻击。OpenSSH

2. 受影响的操作系统：银河麒麟⾼级服务器操作系统V10(SP1)3. 修复版本银河麒麟⾼级服务器操作系统V10(SP1)：104. 受影响的软件包银河麒麟⾼级服务器操作系统V10(SP1)x86_64:

10.x86_10.x86_10.x86_10.x86_10.x86_10.x86_10.x86__ssh_agent_10.x86_ch64:

_ssh_agent_s64el: pam_ssh_agent_

5.修复⽅法⽅法⼀：配置源进⾏升级安装1）打开软件包源配置⽂件，根据仓库地址进⾏修改 银河麒麟⾼级服务器操作系统V10(SP1) 仓库源地址：aarch64：:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/ x86_64：:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/ mips64el：:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/2）配置完成后执⾏更新命令进⾏升级，命令如下：yum update openssh⽅法⼆：下载安装包进⾏升级安装 通过软件包地址下载软件包，使⽤软件包升级命令根据受影响的软件包列表进⾏升级安装,命令如下：rpm -Uvh Packagelists6. 软件包下载地址银河麒麟⾼级服务器操作系统V10(SP1)：Openssh X86_64软件包下载地址::8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/10.x86_p://:8080/NS/V10/V10SP1/os/adv/lic/updates/x86_64/Packages/pam_ssh_agent_10.x86_nssh aarch64软件包下载地址::8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/aarch64/Packages/pam_ssh_agent_nssh mips64el软件包下载地址::8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/p://:8080/NS/V10/V10SP1/os/adv/lic/updates/mips64el/Packages/pam_ssh_agent_通过下载相关软件，上传服务器，进⾏rpm更新升级。