https://www.o6c.com/java/2020/11/01/1432.html
https://blog.csdn.net/sunmenggmail/article/details/42526117
https://blog.csdn.net/baidu_36209638/article/details/109121765
https://blog.csdn.net/asdfrt8686/article/details/101692580?utm_medium=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.pc_relevant_is_cache&depth_1-utm_source=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-1.pc_relevant_is_cache
解決方案：
redhat6、7與centos6、7版本升級到openssh8.1版本與openssl-1.1.1自動化腳本，解決linuxOpenSSH輸入驗證錯誤漏洞(CVE-2019-16905)
解決步驟：
1、附件
https://www.o6c.com/wp-content/uploads/2020/11/漏洞修補文件命令.rar
2、解壓升級包
tar --no-same-owner -zxvf zlib-1.2.11.tar.gz
tar --no-same-owner -zxvf openssh-8.3p1.tar.gz
tar --no-same-owner -zxvf openssl-1.1.1g.tar.gz
3、編譯安裝zlib
cd zlib-1.2.11
./configure --prefix=/usr/local/zlib
make && make install
4、編譯安裝openssl
cd openssl-1.1.1g
./config --prefix=/usr/local/ssl -d shared
make && make install
echo '/usr/local/ssl/lib' >> /etc/ld.so.conf
ldconfig -v
5、安裝openssh
cd openssh-8.3p1
./configure --prefix=/usr/local/openssh --with-zlib=/usr/local/zlib --with-ssl-dir=/usr/local/ssl
make && make install
6、sshd_config文件修改
echo 'PermitRootLogin yes' >>/usr/local/openssh/etc/sshd_config
echo 'PubkeyAuthentication yes' >>/usr/local/openssh/etc/sshd_config
echo 'PasswordAuthentication yes' >>/usr/local/openssh/etc/sshd_config
7、備份原有文件，並將新的配置復制到指定目錄
復制代碼
mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
cp /usr/local/openssh/etc/sshd_config /etc/ssh/sshd_config
mv /usr/sbin/sshd /usr/sbin/sshd.bak
cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd
mv /usr/bin/ssh /usr/bin/ssh.bak
cp /usr/local/openssh/bin/ssh /usr/bin/ssh
mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen.bak
cp /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen
mv /etc/ssh/ssh_host_ecdsa_key.pub /etc/ssh/ssh_host_ecdsa_key.pub.bak
cp /usr/local/openssh/etc/ssh_host_ecdsa_key.pub /etc/ssh/ssh_host_ecdsa_key.pub
復制代碼
8、啟動sshd
service sshd restart
9、查看信息版本
ssh -V
10、升級完成后sftp登錄后瞬間斷開問題
修改/etc/ssh/sshd_config 文件中sftp路徑，改為
Subsystem sftp /usr/libexec/sftp-server