1
# Update package index
2
sudo apt update
3
# Check for upgradable OpenSSH versions (Optional)
4
apt list --upgradable openssh-*
5
# Upgrade OpenSSH client and server
6
sudo apt install --only-upgrade openssh-client openssh-server
7
# Restart SSH service
8
sudo systemctl restart sshd
9
# Verify service status and port listening
10
sudo systemctl status sshd
11
sudo netstat -tunlp | grep :22

1
# Check for available updates
2
sudo yum check-update
3
# Upgrade OpenSSH components
4
sudo yum update openssh openssh-server openssh-clients
5
# Restart and verify service
6
sudo systemctl restart sshd
7
sudo netstat -tunlp | grep :22

1
# Refresh repository metadata
2
sudo dnf makecache
3
# Upgrade SSH components
4
sudo dnf upgrade openssh openssh-server openssh-clients
5
# Reload and verify service
6
sudo systemctl reload sshd
7
sudo netstat -tunlp | grep :22

1
# Create a dedicated workspace
2
mkdir /opt/ssh_upgrade && cd /opt/ssh_upgrade
3

4
# Secure backup of existing configurations and binaries
5
cp -a /etc/ssh /etc/ssh_backup_$(date +%F)
6
cp -a /etc/init.d/sshd /etc/init.d/sshd_backup
7
cp -a /usr/bin/openssl /usr/bin/openssl_backup
8
cp -a /etc/pam.d/sshd /etc/pam.d/sshd_backup
9

10
# Backup critical library dependencies
11
ldd $(which sshd) | awk 'NF == 4 {print $3}' | xargs -I {} cp -a {} /opt/lib_backup/

1
# For Yum-based systems
2
yum -y remove openssh openssh-server openssh-clients openssh-askpass
3
# Alternative for RPM
4
rpm -e --nodeps openssh openssh-server openssh-clients
5
# For Apt-based systems
6
apt purge -y openssh-server openssh-client

1
tar -zxvf openssl-3.2.4.tar.gz
2
cd openssl-3.2.4
3

4
# Optimize compilation parameters
5
./config --prefix=/usr/local/openssl \
6
         --openssldir=/usr/local/openssl \
7
         shared zlib -Wl,-rpath=/usr/local/openssl/lib
8

9
make && make install
10

11
# Update symbolic links
12
ln -sf /usr/local/openssl/bin/openssl /usr/bin/openssl
13
ln -sf /usr/local/openssl/include/openssl /usr/include/openssl
14

15
# Refresh library cache
16
echo "/usr/local/openssl/lib" > /etc/ld.so.conf.d/openssl.conf
17
ldconfig -v | grep -i openssl
18

19
# Verify version
20
openssl version -a

1
tar -zxvf openssh-10.6p1.tar.gz
2
cd openssh-10.6p1
3

4
# Configure with necessary modules (PAM and Zlib support)
5
./configure --prefix=/usr \
6
            --sysconfdir=/etc/ssh \
7
            --with-ssl-dir=/usr/local/openssl \
8
            --with-pam \
9
            --with-zlib
10

11
make -j$(nproc)
12
make install
13

14
# Verify binary compatibility and version
15
ldd /usr/sbin/sshd
16
ssh -V

1
vi /etc/ssh/sshd_config
2

3
# Ensure the following critical configurations are set
4
Port 22
5
ListenAddress 0.0.0.0
6
PermitRootLogin prohibit-password
7
PasswordAuthentication yes
8
UsePAM yes

1
systemctl start sshd
2
# Verify if the service is running correctly
3
systemctl status sshd