CVE-2024-6387

不多说，上更新教程

Ubuntu

其他版本类似，ssh -V查看是否在范围内

安装依赖

apt install -y build-essential zlib1g-dev libssl-dev

下载

wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.8p1.tar.gz

解压

tar -zxf openssh-9.8p1.tar.gz

编译安装

cd openssh-9.8p1/
./configure --prefix=/usr/local/openssh-9.8p1 --sysconfdir=/etc/ssh && make && make install

替换

\cp -arpf /usr/local/openssh-9.8p1/bin/* /usr/bin/

修改配置文件

sed -i 's@#PermitRootLogin prohibit-password@PermitRootLogin yes@g' /etc/ssh/sshd_config

启动

systemctl daemon-reload
systemctl enable ssh
systemctl restart ssh

验证

ssh -V

#输出OpenSSH_9.8p1即成功