Upgrade OpenSSH for ZStack Cloud

Scenario

• Product: ZCF
• Component: ZStack Cloud
• Version: 4.8.x
• Environment: ZStack 4.8.x, C76, dual management
• Trigger: An OpenSSH Server remote-code-execution vulnerability requires remediation.

Symptoms

• Current-node OpenSSH version is 8.7.Xp1-30.el7.x86_64.
• All nodes require remediation or mitigation.
• When direct upgrade is not possible, configuration can reduce the risk.

Assessment

1. Check openssh and openssl versions on all nodes before the change.