Centos7關於curl和glibc修復

Centos 7漏洞

[root@al-bj2-webs01 ~]# rpm -qa|grep curl
python-pycurl-7.19.0-19.el7.x86_64
libcurl-devel-7.29.0-46.el7.x86_64
curl-7.29.0-46.el7.x86_64 這個版本存在漏洞
libcurl-7.29.0-46.el7.x86_64

軟件: crul
命中: curl version less than 0:7.29.0-51.el7
路徑: /usr/bin/curl

軟件: 7.29.0-46.el7
命中: libcurl version less than 0:7.29.0-51.el7
路徑: /usr/lib64/libcurl.so.4

軟件: 7.29.0-46.el7
命中: libcurl-devel version less than 0:7.29.0-51.el7
路徑: /usr/bin/curl-config

軟件: 1.0.3-4.el7
命中: nss-pem version less than 0:1.0.3-5.el7
路徑: /usr/lib64/libnsspem.so
修復
yum update curl
yum update libcurl
yum update libcurl-devel
yum update nss-pem

[root@al-bj2-webs01 ~]# rpm -qa|grep glibc
glibc-common-2.17-222.el7.x86_64
glibc-headers-2.17-222.el7.x86_64
glibc-devel-2.17-222.el7.x86_64
glibc-2.17-222.el7.x86_64 這版本存在問題

軟件: glibc 2.17-222.el7
命中: glibc version less than 0:2.17-260.el7
路徑: /etc/gai.conf

命中: glibc-common version less than 0:2.17-260.el7
路徑: /etc/default

命中: glibc-devel version less than 0:2.17-260.el7
路徑: /usr/include/gnu/stubs-64.h

命中: glibc-headers version less than 0:2.17-260.el7
路徑: /usr/include/_G_config.h

命中: nscd version less than 0:2.17-260.el7
路徑: /etc/nscd.conf
修復
yum update glibc
yum update glibc-common
yum update glibc-devel
yum update glibc-headers
yum update nscd