问题描述
我有一台运行Ubuntu 14.04的服务器，但是PCI要求有问题.我已经在服务器中安装了OpenSSH 6.6p1，然后将其升级到OpenSSH 7.2p，并使用 make编译了代码，并直接从OpenSSH的存储库中进行安装，但是由于我继续获取，似乎有些问题了我检查dpkg -l openssh\*后的旧版本:
I have a server running Ubuntu 14.04, but I have an issue with PCI requirements. I have installed in my server OpenSSH 6.6p1, then I upgraded it to OpenSSH 7.2p, compiling the code with make and make install directly from repositories from OpenSSH, but it seems something is broken because I continue getting the old version after I check dpkg -l openssh\*:
ii openssh-client 1:6.6p1-2ubunt amd64 secure shell (SSH) client,
ii openssh-server 1:6.6p1-2ubunt amd64 secure shell (SSH) server,
ii openssh-sftp-serve 1:6.6p1-2ubunt amd64 secure shell (SSH) sftp server
PCI扫描程序继续报告与我必须安装最新版本的OpenSSH相同的问题.
And PCI scanner continues reporting the same issue about that I have to install the latest version of OpenSSH.
这是问题的CVI ID:CVE-2016-3115
This is the CVI Id of the issue: CVE-2016-3115
推荐答案
我也需要安装最新的OpenSSH，但我想通过软件包而不是从源代码进行编译.
I needed to install the newest OpenSSH as well but I wanted to install it via a package instead of compiling from source.
sudo apt-add-repository 'deb http://archive.ubuntu.com/ubuntu yakkety main universe multiverse'
sudo apt-get update
sudo apt-get install openssh-server=1:7.3p1-1
对我有用. (从技术上讲，这里只需要main和Universe)
It worked for me. (Technically only main and universe were necessary here)
$ ssh -V
OpenSSH_7.3p1 Ubuntu-1, OpenSSL 1.0.2g 1 Mar 2016
编辑(2017-10-04):该答案最近受到关注，现在可能已经过时.请记住，此操作仅需要main和universe，并且我特别想将其作为软件包安装，而不是从源代码进行编译.无论陌生人(在本例中为我)的好意，请谨慎输入来自互联网的随机命令！
Edit (2017-10-04): This answer has been receiving some attention lately and might be out of date now. Remember only main and universe were necessary from this, and I specifically wanted to install this as a package instead of compiling from source. Please be careful with typing random commands from the internet, no matter how well-meaning the stranger (in this case me) is!
这篇关于在Ubuntu 14.04中升级openSSH 7.2p的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！