SSH升级安装包下载地址:https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/准备好安装包和升级需要使用到的脚本ssh9.8_1.sh#!/bin/bash chmod x ssh9.8_2.sh install -v -m700 -d /var/lib/sshd chown -v root:sys /var/lib/sshd yum -y install gcc gcc-c autoconf automake update zlib zlib-devel openssl openssl-devel pcre pcre-devel tar xf openssh-9.8p1.tar.gz cd openssh-9.8p1/ ./configure --prefix/usr --sysconfdir/etc/ssh --with-md5-passwords --with-privsep-path/var/lib/sshdssh9.8_2.sh#!/bin/bash cd openssh-9.8p1 make make install ssh -V ssh -V echo 开始重启服务 systemctl stop sshd sleep 3 systemctl status sshd systemctl start sshd sleep 3 systemctl status sshd ssh -V在当前目录依次执行脚本即可安装完成其他异常情况说明如下参考截图一参考截图二异常一:Startingsshd:/etc/ssh/sshd_config line82:UnsupportedoptionUsePAM处理方式:打开配置文件/etc/ssh/sshd_config 删除对应行就可以了异常二:/etc/ssh/sshd_config line128:Badkey types KexAlgorithms.处理方式PubkeyAcceptedKeyTypes表示指定公钥认证允许的密钥类型。进行如下配置修改PubkeyAcceptedKeyTypesssh-ed25519,rsa-sha2-256,rsa-sha2-512异常三 error:0penSSLconfiqure:required (have100020bf(0penSSL 1.0.2k-fips26 Jan 2017)在升级ssh的时候, 如果ssl版本太低,或者版本不匹配, 给ssl的版本升级一下就可以了, 下面直接开干查看openssl的版本和位置openssl version whereis openssl备份openssl文件mv /usr/bin/openssl /usr/bin/openssl_old mv /usr/include/openssl /usr/include/openssl_old mv /usr/local/openssl/ /usr/local/openssl_old下载openssl,官网地址:https://www.openssl.org/source/openssl-1.1.1.tar.gz解压openssltar -zxvf openssl-1.1.1.tar.gz切换到解压好的openssl目录cd openssl-1.1.1配置openssl安装目录./config --prefix/usr/local/openssl编译安装make make install创建软链接ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl ln -s /usr/local/openssl/include/openssl /usr/include/openssl添加动态链接库数据echo /usr/local/openssl/lib/ /etc/ld.so.conf 检查一下已经在/etc/ld.so.conf中是否存在。更新动态链接库ldconfig -v验证opensslopenssl version -a可以看到,我们使用ssh -V一样可以看到关联的ssl版本是已经更新之后的然后切换回ssh9.8的目录下, 再重新执行脚本./ssh9.8_1.sh,又出现异常: OpenSSL libary not found给./configure的启动配置文件添加参数:–with-ssl-dir/usr/local/openssl 指定OpenSSL的位置就可以了cd到目录 /root/ssh9.8/openssh-9.8p1 ,重新执行./configure --prefix/usr --sysconfdir/etc/ssh --with-md5-passwords --with-privsep-path/ --with-ssl-dir/usr/local/openssl接着再执行脚本./ssh9.8_2.sh重启服务,查看状态systemctl restart sshd systemctl status sshd最后版本升级成功ssh-V升级修复中高风险漏洞-- 2026年9月14日--------------# 政务网C86curl-o/tmp/openssh-9.8_p1_el7_rpms.tar.gz http://[内网 HTTP 服务器ip]/openssh-9.8_p1_el7_rpms.tar.gzrm-rf/tmp/tmp-openssh mkdir/tmp/tmp-openssh-p tar-zxvf/tmp/openssh-9.8_p1_el7_rpms.tar.gz-C/tmp/tmp-openssh yum remove-y openssh openssh-clients openssh-debuginfo openssh-server openssh-debugsource rpm-ivh/tmp/tmp-openssh/* systemctl daemon-reload sleep1 systemctl restart sshd# 互联网C86curl-o/tmp/openssh-9.8_p1_el7_rpms.tar.gz http://[内网 HTTP 服务器ip]/openssh-9.8_p1_el7_rpms.tar.gzrm-rf/tmp/tmp-openssh mkdir/tmp/tmp-openssh-p tar-zxvf/tmp/openssh-9.8_p1_el7_rpms.tar.gz-C/tmp/tmp-openssh yum remove-y openssh openssh-clients openssh-debuginfo openssh-server openssh-debugsource rpm-ivh/tmp/tmp-openssh/* systemctl daemon-reload sleep1 systemctl restart sshd# 政务网ARMcurl-o/tmp/openssh-9.8_p1_el7_rpms_arm.tar.gz http://[内网 HTTP 服务器ip]/openssh-9.8_p1_el7_rpms_arm.tar.gzrm-rf/tmp/tmp-openssh mkdir/tmp/tmp-openssh-p tar-zxvf/tmp/openssh-9.8_p1_el7_rpms_arm.tar.gz-C/tmp/tmp-openssh yum remove-y openssh openssh-clients openssh-debuginfo openssh-server openssh-debugsource rpm-ivh/tmp/tmp-openssh/* systemctl daemon-reload sleep1 systemctl restart sshd# 互联网ARMcurl-o/tmp/openssh-9.8_p1_el7_rpms_arm.tar.gz http://[内网 HTTP 服务器ip]/openssh-9.8_p1_el7_rpms_arm.tar.gzrm-rf/tmp/tmp-openssh mkdir/tmp/tmp-openssh-p tar-zxvf/tmp/openssh-9.8_p1_el7_rpms_arm.tar.gz-C/tmp/tmp-openssh yum remove-y openssh openssh-clients openssh-debuginfo openssh-server openssh-debugsource rpm-ivh/tmp/tmp-openssh/* systemctl daemon-reload sleep1 systemctl restart sshd解压之后的内容是已经准备好的rpm包升级完成后效果对比如果对你有帮助, 请作者抽只烟吧!!!