在CentOS 7上,如何安装nspr 4.25?

分享于 

4分钟阅读

互联网

  繁體

问题:

我试图解决一个安全漏洞-具体来说,https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17006,一般的解决方案是更新包

  • nspr-0:4.21.0-1.el7
  • nss-0:3.44.0-7.el7_7
  • nss-softokn-0:3.44.0-8.el7_7
  • nss-softokn-freebl-0:3.44.0-8.el7_7
  • nss-sysinit-0:3.44.0-7.el7_7
  • nss-tools-0:3.44.0-7.el7_7
  • nss-util-0:3.44.0-4.el7_7

我尝试了标准yum update,但认为4.21是nspr的最新版本,并且已经安装了,漏洞在4.25之前没有修复,

有没有一种方法可以验证作者/软件包的发布?


答案1:

更新在RHEL 7.9中发布,但是CentOS (基于RHEL )还没有更新到7.9.

如果需要提前访问它,你可以获取下个次要CentOS 7版本的包,cr repo


[root@vmtest-centos7 ~]# yum --enablerepo=cr update nspr nss


Loaded plugins: fastestmirror


Loading mirror speeds from cached hostfile


 * base: centos.mirror.vexxhost.com


 * extras: centos.mirror.vexxhost.com


 * updates: centos.mirror.vexxhost.com


Resolving Dependencies


--> Running transaction check


---> Package nspr.x86_64 0:4.21.0-1.el7 will be updated


---> Package nspr.x86_64 0:4.25.0-2.el7_9 will be an update


---> Package nss.x86_64 0:3.44.0-7.el7_7 will be updated


--> Processing Dependency: nss = 3.44.0-7.el7_7 for package: nss-sysinit-3.44.0-7.el7_7.x86_64


--> Processing Dependency: nss(x86-64) = 3.44.0-7.el7_7 for package: nss-tools-3.44.0-7.el7_7.x86_64


---> Package nss.x86_64 0:3.53.1-3.el7_9 will be an update


--> Processing Dependency: nss-util >= 3.53.1-1 for package: nss-3.53.1-3.el7_9.x86_64


--> Processing Dependency: nss-softokn(x86-64) >= 3.53.1-2 for package: nss-3.53.1-3.el7_9.x86_64


--> Running transaction check


---> Package nss-softokn.x86_64 0:3.44.0-8.el7_7 will be updated


---> Package nss-softokn.x86_64 0:3.53.1-6.el7_9 will be an update


--> Processing Dependency: nss-softokn-freebl(x86-64) >= 3.53.1-6.el7_9 for package: nss-softokn-3.53.1-6.el7_9.x86_64


---> Package nss-sysinit.x86_64 0:3.44.0-7.el7_7 will be updated


---> Package nss-sysinit.x86_64 0:3.53.1-3.el7_9 will be an update


---> Package nss-tools.x86_64 0:3.44.0-7.el7_7 will be updated


---> Package nss-tools.x86_64 0:3.53.1-3.el7_9 will be an update


---> Package nss-util.x86_64 0:3.44.0-4.el7_7 will be updated


---> Package nss-util.x86_64 0:3.53.1-1.el7_9 will be an update


--> Running transaction check


---> Package nss-softokn-freebl.x86_64 0:3.44.0-8.el7_7 will be updated


---> Package nss-softokn-freebl.x86_64 0:3.53.1-6.el7_9 will be an update


--> Finished Dependency Resolution



Dependencies Resolved



================================================================================


 Package Arch Version Repository


 Size


================================================================================


Updating:


 nspr x86_64 4.25.0-2.el7_9 cr 127 k


 nss x86_64 3.53.1-3.el7_9 cr 869 k


Updating for dependencies:


 nss-softokn x86_64 3.53.1-6.el7_9 cr 354 k


 nss-softokn-freebl x86_64 3.53.1-6.el7_9 cr 322 k


 nss-sysinit x86_64 3.53.1-3.el7_9 cr 65 k


 nss-tools x86_64 3.53.1-3.el7_9 cr 535 k


 nss-util x86_64 3.53.1-1.el7_9 cr 79 k



Transaction Summary


================================================================================


Upgrade 2 Packages (+5 Dependent packages)



Total download size: 2.3 M


Is this ok [y/d/N]: 





Centos  nspr  
相关文章