一、安装yum-security
这个方法是使用的yum方式更新安全补丁，不需要再去官网上来回查看了，还以自动安装更新。
安装yum-security，这个软件可以检查并更新安全补丁，挺方便
[root@zabbix_server-12-155 ~]# yum -y install yum-security
1、检查是否有可用安全补丁
[root@zabbix_server-12-155 ~]# yum --security check-update Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * base: mirrors.btte.net * epel: mirrors.ustc.edu.cn * extras: mirrors.btte.net * updates: mirrors.nwsuaf.edu.cn * webtatic: uk.repo.webtatic.com Limiting package lists to security relevant ones epel/updateinfo | 750 kB 00:00 3 package(s) needed for security, out of 229 available firebird-libfbclient.x86_64 2.5.7.27050.0-1.el6 epel zabbix22.x86_64 2.2.18-1.el6 epel zabbix22-agent.x86_64
2、列出可以升级的安全补丁
[root@zabbix_server-12-155 ~]# yum list-security Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * base: mirrors.btte.net * epel: mirrors.ustc.edu.cn * extras: mirrors.btte.net * updates: mirrors.nwsuaf.edu.cn * webtatic: uk.repo.webtatic.com FEDORA-EPEL-2017-dd0d0467e9 enhancement GeoIP-GeoLite-data-2017.07-1.el6.noarch FEDORA-EPEL-2017-dd0d0467e9 enhancement GeoIP-GeoLite-data-extra-2017.07-1.el6.noarch FEDORA-EPEL-2017-3f527c60d9 security firebird-libfbclient-2.5.7.27050.0-1.el6.x86_64 FEDORA-EPEL-2017-94b8514427 security zabbix22-2.2.18-1.el6.x86_64 FEDORA-EPEL-2017-94b8514427 security zabbix22-agent-2.2.18-1.el6.x86_64 updateinfo list done
3、查看具体升级包的详细修复信息
[root@zabbix_server-12-155 ~]# yum info-security FEDORA-EPEL-2017-94b8514427 Loaded plugins: fastestmirror, security Loading mirror speeds from cached hostfile * base: mirrors.btte.net * epel: mirrors.ustc.edu.cn * extras: mirrors.btte.net * updates: mirrors.nwsuaf.edu.cn * webtatic: uk.repo.webtatic.com =============================================================================== zabbix22-2.2.18-1.el6 =============================================================================== Update ID : FEDORA-EPEL-2017-94b8514427 Release : Fedora EPEL 6 Type : security Status : stable Issued : 2017-07-11 18:54:44 Updated : 2017-06-24 10:46:38 Bugs : 1448395 - CVE-2017-2824 zabbix22: zabbix: Multiple vulnerabilities [epel-all] Description : - http://www.zabbix.com/rn2.2.18 : - : https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2218 updateinfo info done
4、安装升级补丁包
这是用的是upgrade而不是update，以下两者区别：
Linux升级命令有两个分别是yum upgrade和yum update, 这个两个命令是有区别的:
yum -y update
升级所有包同时也升级软件和系统内核
yum -y upgrade
只升级所有包，不升级软件和系统内核
开始升级所有软件的安全补丁：
[root@zabbix_server-12-155 ~]# yum -y --security upgrade
二、自动更新安全补丁
[root@zabbix_server-12-155 ~]# yum -y install yum-cron
默认情况下zai /etc/sysconfig/yum-cron 配置文件中把下面两个参数改为yes
# Don't install, just check (valid: yes|no) CHECK_ONLY=yes # Check to see if you can reach the repos before updating (valid: yes|no) CHECK_FIRST=yes # Don't install, just check and download (valid: yes|no) # Implies CHECK_ONLY=yes (gotta check first to see what to download) DOWNLOAD_ONLY=yes 开机自动启动 [root@zabbix_server-12-155 ~]# service yum-cron start Enabling nightly yum update: [ OK ] [root@zabbix_server-12-155 ~]# chkconfig yum-cron on [root@zabbix_server-12-155 ~]# chkconfig yum-cron --list yum-cron 0:off 1:off 2:on 3:on 4:on 5:on 6:off
以后可以自动更新补丁了
