腾讯云服务器速冻提权漏洞、rpm数据库损坏

目录

Sudo 本地提权漏洞(CVE-2021-3156)

1、更新漏洞：

2、重新构建步骤：

3、再次更新漏洞：

---

最近买的腾讯云服务器，提示系统组件漏洞待解决

Sudo 本地提权漏洞(CVE-2021-3156)

1、更新漏洞：

yum update sudo
报错了：
[root@VM-0-11-centos ~]# yum update sudo
error: rpmdb: BDB0113 Thread/process 27871/140170839349312 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
CRITICAL:yum.main:

Error: rpmdb open failed

问题：强制结束了yum，导致rpm数据库损坏，需要重新构建

2、重新构建步骤：

步骤1：进入rpm目录
[root@VM-0-11-centos ~]# cd /var/lib/rpm/
[root@VM-0-11-centos rpm]# ls
Basenames  Conflictname  __db.001  __db.002  __db.003  Dirnames  Group  Installtid  Name  Obsoletename  Packages  Providename  Requirename  Sha1header  Sigmd5  Triggername

步骤2：删除损坏文件
[root@VM-0-11-centos rpm]# for i in `ls | grep 'db.'`;do mv $i $i.bak;done
[root@VM-0-11-centos rpm]# ls
Basenames  Conflictname  __db.001.bak  __db.002.bak  __db.003.bak  Dirnames  Group  Installtid  Name  Obsoletename  Packages  Providename  Requirename  Sha1header  Sigmd5  Triggername

步骤3：重新build
[root@VM-0-11-centos rpm]# rpm --rebuilddb

步骤4：清楚yum缓存
[root@VM-0-11-centos rpm]# yum clean all
Loaded plugins: fastestmirror, langpacks
Repodata is over 2 weeks old. Install yum-cron? Or run: yum makecache fast
Cleaning repos: docker-ce-stable elrepo epel extras kubernetes os updates
Cleaning up list of fastest mirrors
Other repos take up 9.6 M of disk space (use --verbose for details)

3、再次更新漏洞：

成功！！！

[root@VM-0-11-centos rpm]# yum update sudo
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
 * elrepo: mirrors.tuna.tsinghua.edu.cn
docker-ce-stable                                                                                                                                                                                                     | 3.5 kB  00:00:00     
elrepo                                                                                                                                                                                                               | 3.0 kB  00:00:00     
epel                                                                                                                                                                                                                 | 4.7 kB  00:00:00     
extras                                                                                                                                                                                                               | 2.9 kB  00:00:00     
kubernetes                                                                                                                                                                                                           | 1.4 kB  00:00:00     
os                                                                                                                                                                                                                   | 3.6 kB  00:00:00     
updates                                                                                                                                                                                                              | 2.9 kB  00:00:00     
docker-ce-stable/x86_64/primar FAILED                                          
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found    ]  0.0 B/s |    0 B  --:--:-- ETA 
Trying other mirror.
To address this issue please refer to the below wiki article 

https://wiki.centos.org/yum-errors

If above article doesn't help to resolve this issue please use https://bugs.centos.org/.

docker-ce-stable/x86_64/primar FAILED                                          
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found    ]  0.0 B/s |    0 B  --:--:-- ETA 
Trying other mirror.
https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/repodata/ea7a69768bb34e3669908d94dc2c3dd2ecb41ccaab69cbbfe67e4b5c5d2bec0c-primary.sqlite.bz2: [Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
kubernetes                                                                                                                                                                                                                          633/633
Resolving Dependencies
--> Running transaction check
---> Package sudo.x86_64 0:1.8.23-4.el7_7.2 will be updated
---> Package sudo.x86_64 0:1.8.23-10.el7_9.1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

============================================================================================================================================================================================================================================
 Package                                             Arch                                                  Version                                                             Repository                                              Size
============================================================================================================================================================================================================================================
Updating:
 sudo                                                x86_64                                                1.8.23-10.el7_9.1                                                   updates                                                843 k

Transaction Summary
============================================================================================================================================================================================================================================
Upgrade  1 Package

Total download size: 843 k
Is this ok [y/d/N]: y
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
sudo-1.8.23-10.el7_9.1.x86_64.rpm                                                                                                                                                                                    | 843 kB  00:00:01     
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : sudo-1.8.23-10.el7_9.1.x86_64                                                                                                                                                                                            1/2 
  Cleanup    : sudo-1.8.23-4.el7_7.2.x86_64                                                                                                                                                                                             2/2 
  Verifying  : sudo-1.8.23-10.el7_9.1.x86_64                                                                                                                                                                                            1/2 
  Verifying  : sudo-1.8.23-4.el7_7.2.x86_64                                                                                                                                                                                             2/2 

Updated:
  sudo.x86_64 0:1.8.23-10.el7_9.1                                                                                                                                                                                                           

Complete!