记录一下linux漏洞修补命令

来源于阿里云服务器漏洞修复提醒

USN-3707-1: NTP 漏洞

apt-get update && apt-get install ntpdate —only-upgrade

USN-3457-1: curl 漏洞

软件：libcurl3-gnutls 7.35.0-1ubuntu2.3

命中：libcurl3-gnutls version less than 0:7.35.0-1ubuntu2.12

路径：/usr/share/doc/libcurl3-gnutls

命令：apt-get update && apt-get install libcurl3-gnutls —only-upgrade

USN-3270-1: NSS漏洞

软件：libnss3 3.17.4-0ubuntu0.14.04.1

命中：libnss3 version less than 2:3.28.4-0ubuntu0.14.04.1

路径：/usr/share/lintian/overrides/libnss3

软件：libnss3-nssdb 3.17.4-0ubuntu0.14.04.1

命中：libnss3-nssdb version less than 2:3.28.4-0ubuntu0.14.04.1

路径：/usr/share/doc/libnss3-nssdb

命令：apt-get update && apt-get install libnss3 —only-upgrade

命令：apt-get update && apt-get install libnss3-nssdb —only-upgrade

USN-2017 krb5 漏洞

软件：krb5-locales 1.12+dfsg-2ubuntu5.1

命中：krb5-locales version less than 0:1.12+dfsg-2ubuntu5.4

路径：/usr/share/doc/krb5-locales

软件：libkdb5-7 1.12+dfsg-2ubuntu5.1

命中：libkdb5-7 version less than 0:1.12+dfsg-2ubuntu5.4

路径：/usr/share/doc/libkdb5-7

apt-get update && apt-get install krb5-locales —only-upgrade

apt-get update && apt-get install libkdb5-7 —only-upgrade

USN-3876-1: Avahi 漏洞

软件：libavahi-common-data 0.6.31-4ubuntu1

命中：libavahi-common-data version less than 0:0.6.31-4ubuntu1.3

路径：/usr/share/doc/libavahi-common-data

apt-get update && apt-get install libavahi-common-data —only-upgrade

USN-2914-1: OpenSSL 漏洞

软件：libssl1.0.0 1.0.1f-1ubuntu2.11

命中：libssl1.0.0 version less than 0:1.0.1f-1ubuntu2.18

路径：/usr/share/doc/libssl1.0.0

apt-get update && apt-get install libssl1.0.0 —only-upgrade

USN-2993-1: Firefox漏洞

软件：libnss3 3.17.4-0ubuntu0.14.04.1

命中：libnss3 version less than 2:3.23-0ubuntu0.14.04.1

路径：/usr/share/lintian/overrides/libnss3

软件：libnss3-nssdb 3.17.4-0ubuntu0.14.04.1

命中：libnss3-nssdb version less than 2:3.23-0ubuntu0.14.04.1

路径：/usr/share/doc/libnss3-nssdb

apt-get update && apt-get install libnss3 —only-upgrade

apt-get update && apt-get install libnss3-nssdb —only-upgrade

USN-3758-1: libx11 漏洞

软件：libx11-6 1.6.2-1ubuntu2

命中：libx11-6 version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/lintian/overrides/libx11-6

软件：libx11-data 1.6.2-1ubuntu2

命中：libx11-data version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/doc/libx11-data

软件：libx11-xcb1 1.6.2-1ubuntu2

命中：libx11-xcb1 version less than 2:1.6.2-1ubuntu2.1

路径：/usr/share/doc/libx11-xcb1

apt-get update && apt-get install libx11-6 —only-upgrade

apt-get update && apt-get install libx11-data —only-upgrade

apt-get update && apt-get install libx11-xcb1 —only-upgrade

USN-3767-1: GLib 漏洞

软件：libglib2.0-0 2.40.2-0ubuntu1

命中：libglib2.0-0 version less than 0:2.40.2-0ubuntu1.1

路径：/usr/share/lintian/overrides/libglib2.0-0

软件：libglib2.0-data 2.40.2-0ubuntu1

命中：libglib2.0-data version less than 0:2.40.2-0ubuntu1.1

路径：/usr/share/doc/libglib2.0-data

apt-get update && apt-get install libglib2.0-0 —only-upgrade

apt-get update && apt-get install libglib2.0-data —only-upgrade

USN-2018 intel-microcode 漏洞

软件：intel-microcode 3.20180807a.0ubuntu0.14.04.1

命中：intel-microcode version less than 0:3.20190514.0ubuntu0.14.04.1

路径：/usr/share/doc/intel-microcode

apt-get update && apt-get install intel-microcode —only-upgrade

USN-3068-1: Libidn

软件：libidn11 1.28-1ubuntu2

命中：libidn11 version less than 0:1.28-1ubuntu2.1

路径：/usr/share/doc/libidn11

apt-get update && apt-get install libidn11 —only-upgrade

USN-3212-1: LibTIFF 漏洞

软件：libtiff5 4.0.3-7ubuntu0.3

命中：libtiff5 version less than 0:4.0.3-7ubuntu0.6

路径：/usr/share/lintian/overrides/libtiff5

apt-get update && apt-get install libtiff5 —only-upgrade

USN-3686-1: file 漏洞

软件：file 5.14-2ubuntu3.3

命中：file version less than 1:5.14-2ubuntu3.4

路径：/usr/share/doc/file

软件：libmagic1 5.14-2ubuntu3.3

命中：libmagic1 version less than 1:5.14-2ubuntu3.4

路径：/usr/share/doc/libmagic1

USN-2018 tiff 漏洞

软件：libtiff5 4.0.3-7ubuntu0.3

命中：libtiff5 version less than 0:4.0.3-7ubuntu0.9

路径：/usr/share/lintian/overrides/libtiff5

USN-3860-1: libcaca 漏洞

软件：libcaca0 0.99.beta18-1ubuntu5

命中：libcaca0 version less than 0:0.99.beta18-1ubuntu5.1

路径：/usr/share/doc/libcaca0

apt-get update && apt-get install libcaca0 —only-upgrade

USN-2651-1: GNU patch 漏洞

软件：patch 2.7.1-4ubuntu1

命中：patch version less than 0:2.7.1-4ubuntu2.3

路径：/usr/bin/patch

apt-get update && apt-get install patch —only-upgrade

USN-2698-1: SQLite 漏洞

软件：libsqlite3-0 3.8.2-1ubuntu2

命中：libsqlite3-0 version less than 0:3.8.2-1ubuntu2.1

路径：/usr/share/doc/libsqlite3-0

apt-get update && apt-get install libsqlite3-0 —only-upgrade

USN-3172-1: Bind 漏洞

apt-get update && apt-get install bind9-host —only-upgrade

apt-get update && apt-get install dnsutils —only-upgrade

apt-get update && apt-get install libbind9-90 —only-upgrade

apt-get update && apt-get install libdns100 —only-upgrade

apt-get update && apt-get install libisc95 —only-upgrade

apt-get update && apt-get install libisccc90 —only-upgrade

apt-get update && apt-get install libisccfg90 —only-upgrade

apt-get update && apt-get install liblwres90 —only-upgrade

USN-2017 systemd 漏洞

apt-get update && apt-get install libpam-systemd —only-upgrade

apt-get update && apt-get install libsystemd-daemon0 —only-upgrade

apt-get update && apt-get install libsystemd-login0 —only-upgrade

apt-get update && apt-get install libudev1 —only-upgrade

apt-get update && apt-get install systemd-services —only-upgrade

apt-get update && apt-get install udev —only-upgrade

USN-3090-1: Pillow 漏洞

apt-get update && apt-get install python-imaging —only-upgrade

apt-get update && apt-get install python-pil —only-upgrade

USN-3139-1: Vim 漏洞

软件：vim 7.4.052-1ubuntu3

命中：vim version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/lintian/overrides/vim

软件：vim-common 7.4.052-1ubuntu3

命中：vim-common version less than 2:7.4.052-1ubuntu3.1

路径：/usr/lib/mime/packages/vim-common

软件：vim-runtime 7.4.052-1ubuntu3

命中：vim-runtime version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/doc/vim-runtime

软件：vim-tiny 7.4.052-1ubuntu3

命中：vim-tiny version less than 2:7.4.052-1ubuntu3.1

路径：/usr/share/lintian/overrides/vim-tiny

apt-get update && apt-get install vim —only-upgrade

apt-get update && apt-get install vim-common —only-upgrade

apt-get update && apt-get install vim-runtime —only-upgrade

apt-get update && apt-get install vim-tiny —only-upgrade

USN-3283-1: rtmpdump 漏洞

软件：librtmp0 2.4+20121230.gitdf6c518-1

命中：librtmp0 version less than 0:2.4+20121230.gitdf6c518-1ubuntu0.1

路径：/usr/share/doc/librtmp0

apt-get update && apt-get install librtmp0 —only-upgrade

USN-2013 isc-dhcp 漏洞

软件：isc-dhcp-client 4.2.4-7ubuntu12

命中：isc-dhcp-client version less than 0:4.2.4-7ubuntu12.3

路径：/usr/share/lintian/overrides/isc-dhcp-client

软件：isc-dhcp-common 4.2.4-7ubuntu12

命中：isc-dhcp-common version less than 0:4.2.4-7ubuntu12.3

路径：/usr/share/lintian/overrides/isc-dhcp-common

apt-get update && apt-get install isc-dhcp-client —only-upgrade

apt-get update && apt-get install isc-dhcp-common —only-upgrade

USN-3935-1: BusyBox 漏洞

软件：busybox-initramfs 1.21.0-1ubuntu1

命中：busybox-initramfs version less than 1:1.21.0-1ubuntu1.4

路径：/usr/share/doc/busybox-initramfs

apt-get update && apt-get install busybox-initramfs —only-upgrade

apt-get update && apt-get install busybox-static —only-upgrade

USN-2966-1: OpenSSH 漏洞

openssh-client 6.6p1-2ubuntu2

命中：openssh-client version less than 1:6.6p1-2ubuntu2.7

路径：/usr/share/doc/openssh-client

软件：openssh-server 6.6p1-2ubuntu2

命中：openssh-server version less than 1:6.6p1-2ubuntu2.7

路径：/etc/network/if-up.d/openssh-server

软件：openssh-sftp-server 6.6p1-2ubuntu2

命中：openssh-sftp-server version less than 1:6.6p1-2ubuntu2.7

路径：/usr/share/doc/openssh-sftp-server

apt-get update && apt-get install openssh-client —only-upgrade

apt-get update && apt-get install openssh-server —only-upgrade

apt-get update && apt-get install openssh-sftp-server —only-upgrade

USN-3156-1: APT 漏洞

apt-get update && apt-get install apt —only-upgrade

apt-get update && apt-get install apt-transport-https —only-upgrade

apt-get update && apt-get install apt-utils —only-upgrade

apt-get update && apt-get install libapt-inst1.5 —only-upgrade

apt-get update && apt-get install libapt-pkg4.12 —only-upgrade

USN-2626-1: Qt 漏洞

apt-get update && apt-get install libqt4-dbus —only-upgrade

apt-get update && apt-get install libqt4-declarative —only-upgrade

apt-get update && apt-get install libqt4-designer —only-upgrade

apt-get update && apt-get install libqt4-help —only-upgrade

apt-get update && apt-get install libqt4-network —only-upgrade

apt-get update && apt-get install libqt4-opengl —only-upgrade

apt-get update && apt-get install libqt4-qt3support —only-upgrade

apt-get update && apt-get install libqt4-script —only-upgrade

apt-get update && apt-get install libqt4-scripttools —only-upgrade

apt-get update && apt-get install libqt4-sql —only-upgrade

apt-get update && apt-get install libqt4-sql-mysql —only-upgrade

apt-get update && apt-get install libqt4-svg —only-upgrade

apt-get update && apt-get install libqt4-test —only-upgrade

apt-get update && apt-get install libqt4-xml —only-upgrade

apt-get update && apt-get install libqt4-xmlpatterns —only-upgrade

apt-get update && apt-get install libqtcore4 —only-upgrade

apt-get update && apt-get install libqtdbus4 —only-upgrade

apt-get update && apt-get install libqtgui4 —only-upgrade

apt-get update && apt-get install qdbus —only-upgrade

apt-get update && apt-get install qt4-linguist-tools —only-upgrade

apt-get update && apt-get install qt4-qmake —only-upgrade

apt-get update && apt-get install qtcore4-l10n —only-upgrade

USN-3347-1: Libgcrypt 漏洞

软件：gnupg 1.4.16-1ubuntu2.1

命中：gnupg version less than 0:1.4.16-1ubuntu2.6

路径：/usr/lib/gnupg

软件：gpgv 1.4.16-1ubuntu2.1

命中：gpgv version less than 0:1.4.16-1ubuntu2.6

路径：/usr/bin/gpgv

软件：libgcrypt11 1.5.3-2ubuntu4.2

命中：libgcrypt11 version less than 0:1.5.3-2ubuntu4.5

路径：/usr/share/doc/libgcrypt11

apt-get update && apt-get install gnupg —only-upgrade

apt-get update && apt-get install gpgv —only-upgrade

apt-get update && apt-get install libgcrypt11 —only-upgrade

USN-2918-1: pixman 漏洞

软件：libpixman-1-0 0.30.2-2ubuntu1

命中：libpixman-1-0 version less than 0:0.30.2-2ubuntu1.1

路径：/usr/share/lintian/overrides/libpixman-1-0

apt-get update && apt-get install libpixman-1-0 —only-upgrade

USN-3584-1: sensible-utils 漏洞

软件：sensible-utils 0.0.9

命中：sensible-utils version less than 0:0.0.9ubuntu0.14.04.1

路径：/usr/lib/mime/packages/sensible-utils

apt-get update && apt-get install sensible-utils —only-upgrade

USN-3943-1: Wget 漏洞

软件：wget 1.15-1ubuntu1.14.04.1

命中：wget version less than 0:1.15-1ubuntu1.14.04.5

路径：/usr/bin/wget

apt-get update && apt-get install wget —only-upgrade

USN-2820-1: dpkg 漏洞

软件：dpkg 1.17.5ubuntu5.3

命中：dpkg version less than 0:1.17.5ubuntu5.5

路径：/etc/cron.daily/dpkg

软件：libdpkg-perl 1.17.5ubuntu5.3

命中：libdpkg-perl version less than 0:1.17.5ubuntu5.5

路径：/usr/share/lintian/overrides/libdpkg-perl

apt-get update && apt-get install dpkg —only-upgrade

apt-get update && apt-get install libdpkg-perl —only-upgrade

USN-3353-2: Samba 漏洞

apt-get update && apt-get install libasn1-8-heimdal —only-upgrade

apt-get update && apt-get install libgssapi3-heimdal —only-upgrade

apt-get update && apt-get install libhcrypto4-heimdal —only-upgrade

apt-get update && apt-get install libheimbase1-heimdal —only-upgrade

apt-get update && apt-get install libheimntlm0-heimdal —only-upgrade

apt-get update && apt-get install libhx509-5-heimdal —only-upgrade

apt-get update && apt-get install libkrb5-26-heimdal —only-upgrade

apt-get update && apt-get install libroken18-heimdal —only-upgrade

apt-get update && apt-get install libwind0-heimdal —only-upgrade

USN-3841-1: lxml 漏洞

软件：python-lxml 3.3.3-1ubuntu0.1

命中：python-lxml version less than 0:3.3.3-1ubuntu0.2

路径：/usr/share/doc/python-lxml

apt-get update && apt-get install python-lxml —only-upgrade

USN-3658-1: procps-ng 漏洞

软件：libprocps3 3.3.9-1ubuntu2.2

命中：libprocps3 version less than 1:3.3.9-1ubuntu2.3

路径：/usr/share/doc/libprocps3

软件：procps 3.3.9-1ubuntu2.2

命中：procps version less than 1:3.3.9-1ubuntu2.3

路径：/usr/bin/w.procps

apt-get update && apt-get install libprocps3 —only-upgrade

apt-get update && apt-get install procps —only-upgrade

USN-3246-1: Eject 漏洞

软件：eject 2.1.5+deb1+cvs20081104-13.1

命中：eject version less than 0:2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1

路径：/usr/lib/eject

apt-get update && apt-get install eject —only-upgrade

USN-3309-1: Libtasn1 漏洞

软件：libtasn1-6 3.4-3ubuntu0.3

命中：libtasn1-6 version less than 0:3.4-3ubuntu0.5

路径：/usr/share/doc/libtasn1-6

apt-get update && apt-get install libtasn1-6 —only-upgrade

USN-3309-1: Libtasn1 漏洞

软件：libtasn1-6 3.4-3ubuntu0.3

命中：libtasn1-6 version less than 0:3.4-3ubuntu0.5

路径：/usr/share/doc/libtasn1-6

apt-get update && apt-get install libtasn1-6 —only-upgrade

USN-3454-1: libffi 漏洞

软件：libffi6 3.1~rc1+r3.0.13-12

命中：libffi6 version less than 0:3.1~rc1+r3.0.13-12ubuntu0.2

路径：/usr/share/doc/libffi6

apt-get update && apt-get install libffi6 —only-upgrade

USN-2742-1: OpenLDAP 漏洞

软件：libldap-2.4-2 2.4.31-1+nmu2ubuntu8

命中：libldap-2.4-2 version less than 0:2.4.31-1+nmu2ubuntu8.2

路径：/usr/share/lintian/overrides/libldap-2.4-2

apt-get update && apt-get install libldap-2.4-2 —only-upgrade

USN-3247-1: AppArmor 漏洞

软件：apparmor 2.8.95~2430-0ubuntu5.1

命中：apparmor version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/etc/init.d/apparmor

软件：libapparmor-perl 2.8.95~2430-0ubuntu5.1

命中：libapparmor-perl version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/usr/share/doc/libapparmor-perl

软件：libapparmor1 2.8.95~2430-0ubuntu5.1

命中：libapparmor1 version less than 0:2.10.95-0ubuntu2.6~14.04.1

路径：/usr/share/doc/libapparmor1

apt-get update && apt-get install apparmor —only-upgrade

apt-get update && apt-get install libapparmor-perl —only-upgrade

apt-get update && apt-get install libapparmor1 —only-upgrade

USN-3311-1: libnl 漏洞

软件：libnl-3-200 3.2.21-1

命中：libnl-3-200 version less than 0:3.2.21-1ubuntu4.1

路径：/usr/share/doc/libnl-3-200

软件：libnl-genl-3-200 3.2.21-1

命中：libnl-genl-3-200 version less than 0:3.2.21-1ubuntu4.1

路径：/usr/share/doc/libnl-genl-3-200

apt-get update && apt-get install libnl-3-200 —only-upgrade

apt-get update && apt-get install libnl-genl-3-200 —only-upgrade

USN-3861-1: PolicyKit 漏洞

软件：libpolkit-gobject-1-0 0.105-4ubuntu2

命中：libpolkit-gobject-1-0 version less than 0:0.105-4ubuntu3.14.04.5

路径：/usr/share/doc/libpolkit-gobject-1-0

apt-get update && apt-get install libpolkit-gobject-1-0 —only-upgrade

USN-3183-1: GnuTLS 漏洞

软件：libgnutls-openssl27 2.12.23-12ubuntu2.2

命中：libgnutls-openssl27 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutls-openssl27

软件：libgnutls26 2.12.23-12ubuntu2.2

命中：libgnutls26 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutls26

软件：libgnutlsxx27 2.12.23-12ubuntu2.2

命中：libgnutlsxx27 version less than 0:2.12.23-12ubuntu2.6

路径：/usr/share/doc/libgnutlsxx27

apt-get update && apt-get install libgnutls-openssl27 —only-upgrade

apt-get update && apt-get install libgnutls26 —only-upgrade

apt-get update && apt-get install libgnutlsxx27 —only-upgrade

USN-3810-1: ppp 漏洞

软件：ppp 2.4.5-5.1ubuntu2.1

命中：ppp version less than 0:2.4.5-5.1ubuntu2.3

路径：/usr/share/doc/ppp

apt-get update && apt-get install ppp —only-upgrade

USN-3861-1: PolicyKit 漏洞

软件：libpolkit-gobject-1-0 0.105-4ubuntu2

命中：libpolkit-gobject-1-0 version less than 0:0.105-4ubuntu3.14.04.5

路径：/usr/share/doc/libpolkit-gobject-1-0

apt-get update && apt-get install libpolkit-gobject-1-0 —only-upgrade

USN-3183-1: GnuTLS 漏洞

apt-get update && apt-get install libgnutls-openssl27 —only-upgrade

apt-get update && apt-get install libgnutls26 —only-upgrade

apt-get update && apt-get install libgnutlsxx27 —only-upgrade

USN-3810-1: ppp 漏洞

软件：ppp 2.4.5-5.1ubuntu2.1

命中：ppp version less than 0:2.4.5-5.1ubuntu2.3

路径：/usr/share/doc/ppp

apt-get update && apt-get install ppp —only-upgrade