用于确认某个升级包是否被安装。
一、ubuntu、debian系列:
/var/log/dpkg.log
/var/log/apt/history.log 等
# cat /var/log/dpkg.log|grep upgrade
2024-07-01 11:00:54 upgrade openssh-sftp-server:amd64 1:8.9p1-3ubuntu0.7 1:8.9p1-3ubuntu0.10
2024-07-01 11:00:55 upgrade openssh-server:amd64 1:8.9p1-3ubuntu0.7 1:8.9p1-3ubuntu0.10
2024-07-01 11:00:56 upgrade openssh-client:amd64 1:8.9p1-3ubuntu0.7 1:8.9p1-3ubuntu0.10
2024-07-01 11:00:57 upgrade ssh:all 1:8.9p1-3ubuntu0.7 1:8.9p1-3ubuntu0.10
# cat /var/log/apt/history.log
Start-Date: 2024-07-01 11:00:54
Commandline: apt-get -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold --ignore-missing -fy upgrade
Upgrade: openssh-client:amd64 (1:8.9p1-3ubuntu0.7, 1:8.9p1-3ubuntu0.10), ssh:amd64 (1:8.9p1-3ubuntu0.7, 1:8.9p1-3ubuntu0.10), openssh-server:amd64 (1:8.9p1-3ubuntu0.7, 1:8.9p1-3ubuntu0.10), openssh-sftp-server:amd64 (1:8.9p1-3ubuntu0.7, 1:8.9p1-3ubuntu0.10)
End-Date: 2024-07-01 11:01:02
# ls -l /usr/sbin/sshd
-rwxr-xr-x 1 root root 917192 Jun 26 13:11 /usr/sbin/sshd
# cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.4 LTS (Jammy Jellyfish)"
二、CentOS、Redhat系列
/var/log/yum.log
# cat /var/log/yum.log|grep ssh
Jun 03 11:08:31 Updated: libssh2-1.8.0-4.el7_9.1.x86_64
Jun 03 11:08:59 Updated: openssh-7.4p1-23.el7_9.x86_64
Jun 03 11:09:07 Updated: openssh-server-7.4p1-23.el7_9.x86_64
Jun 03 11:09:08 Updated: openssh-clients-7.4p1-23.el7_9.x86_64
# yum history
ID | Command line | Date and time | Action(s) | Altered
------------------------------------------------------------------------------------------------------------
102 | -y update | 2024-07-03 12:00 | C, E, I, U | 13
101 | -y update | 2024-06-06 07:00 | C, E, I, U | 15
100 | -y update | 2024-05-31 06:00 | Upgrade | 3
99 | -y update | 2024-05-30 18:00 | Upgrade | 1
98 | -y update | 2024-05-28 23:00 | C, E, I, U | 211 EE
三、AlmaLinux
# grep ssh /var/log/dnf.rpm.log
2024-05-28T23:01:14+0800 SUBDEBUG Upgrade: openssh-8.0p1-24.el8.x86_64
2024-05-28T23:01:34+0800 SUBDEBUG Upgrade: libssh-config-0.9.6-14.el8.noarch
2024-05-28T23:01:34+0800 SUBDEBUG Upgrade: libssh-0.9.6-14.el8.x86_64
2024-05-28T23:01:59+0800 SUBDEBUG Upgrade: openssh-server-8.0p1-24.el8.x86_64
2024-05-28T23:01:59+0800 INFO warning: /etc/ssh/sshd_config created as /etc/ssh/sshd_config.rpmnew
2024-05-28T23:01:59+0800 SUBDEBUG Upgrade: openssh-clients-8.0p1-24.el8.x86_64
2024-05-28T23:02:05+0800 SUBDEBUG Upgraded: openssh-server-8.0p1-19.el8_9.2.x86_64
2024-05-28T23:02:05+0800 SUBDEBUG Upgraded: openssh-clients-8.0p1-19.el8_9.2.x86_64
2024-05-28T23:02:06+0800 SUBDEBUG Upgraded: openssh-8.0p1-19.el8_9.2.x86_64
2024-05-28T23:02:19+0800 SUBDEBUG Upgraded: libssh-0.9.6-13.el8_9.x86_64
2024-05-28T23:02:20+0800 SUBDEBUG Upgraded: libssh-config-0.9.6-13.el8_9.noarch
# cat /var/log/dnf.log
2024-07-03T19:00:02+0800 INFO --- logging initialized ---
2024-07-03T19:00:02+0800 DDEBUG timer: config: 10 ms
2024-07-03T19:00:02+0800 DEBUG Loaded plugins: builddep, changelog, config-manager, copr, debug, debuginfo-i
nstall, download, generate_completion_cache, groups-manager, needs-restarting, playground, repoclosure, repo
diff, repograph, repomanage, reposync, system-upgrade
2024-07-03T19:00:02+0800 DEBUG YUM version: 4.7.0
2024-07-03T19:00:02+0800 DDEBUG Command: yum -y update
参考:
https://blog.csdn.net/weixin_32929205/article/details/116712520
https://superuser.com/questions/147857/how-to-view-history-of-yum-commands-update-install-remove
OpenSSH远程代码执行漏洞 (CVE-2024-6387) 安全风险通告
https://www.secrss.com/articles/67636?app=1
https://www.nodeseek.com/post-128284-1
影响版本:8.5p1 <= OpenSSH < 9.8p1
sshd升级后,大版本不变,后面的小版本号有变化
# ssh -V
原始版本:
OpenSSH_8.9p1 Ubuntu-3ubuntu0.6, OpenSSL 3.0.2 15 Mar 2022
此次更新后的版本:
OpenSSH_8.9p1 Ubuntu-3ubuntu0.10, OpenSSL 3.0.2 15 Mar 2022
更新完之后,sshd最新安全版本号如下:
Debian 12: 9.2p1-2+deb12u3
Ubuntu 22.04: 8.9p1-3ubuntu0.10
Ubuntu 24.04: 9.6p1-3ubuntu13.3
AlmaLinux 9: 8.7p1-38.el9.alma.2
Oracle Linux 9: 8.7p1-38.0.2.el9
https://www.ithome.com/0/779/000.htm
如果 OpenSSH 服务器无法立即更新,可在 sshd 配置文件中将 "LoginGraceTime" 设置为 0,但要注意这可能会使服务器遭受拒绝服务攻击。
Linux OS尽量选择LTS(长期支持 Long-term support)的版本,再安装中神通大地云控,因为大地云控的安全加固功能具备自动/强制系统升级的功能,一小时检查一次,能保证安全升级包第一时间安装到位,让黑客无机可乘:
![](http://www.trustcomputing.com.cn/utmwall-rom/0/url.png)
更多介绍:
http://www.trustcomputing.com.cn/cn/index.php/product/dns-url
![](http://www.trustcomputing.com.cn/utmwall-rom/0/url.png)
下载地址:
http://www.trustcomputing.com.cn/bbs/viewthread.php?tid=1174
[
本帖最后由 linda 于 2024-7-4 14:25 编辑 ]