☰

Fedora 20 Heartbleed openssl 수정

tag-icon • tag-icon openssl fedora
Fedora 20 Heartbleed openssl 수정

Fedora Core 20의 OpenSSL과 관련된 Heartbleed 오류를 수정하고 싶습니다. 여기에 설명된 지침을 따르려고 했습니다.

http://www.forums.fedoraforum.org/showthread.php?t=298372

즉, 설치 패키지는 다음과 같습니다.

yum -y install koji
koji download-build --arch=x86_64 openssl-1.0.1e-37.fc20.1
yum localinstall openssl-1.0.1e-37.fc20.1.x86_64.rpm

하지만 계속해서 다음 오류가 발생합니다.

Error: Package: 1:openssl-1.0.1e-37.fc20.1.x86_64 (/openssl-1.0.1e-37.fc20.1.x86_64)
       Requires: openssl-libs(x86-64) = 1:1.0.1e-37.fc20.1
       Installed: 1:openssl-libs-1.0.1e-37.fc20.x86_64 (@updates)
           openssl-libs(x86-64) = 1:1.0.1e-37.fc20
       Available: 1:openssl-libs-1.0.1e-30.fc20.x86_64 (fedora)
           openssl-libs(x86-64) = 1:1.0.1e-30.fc20
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

openssl-libs를 별도로 설치하려고 시도했지만 다음 오류가 발생했습니다.

Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libssl.so.10(libssl.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10(libssl.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10(libssl.so.10)
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libssl.so.10(libssl.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10(libssl.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10(libssl.so.10)
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(OPENSSL_1.0.1)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(OPENSSL_1.0.1)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(OPENSSL_1.0.1)
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
 You could try using --skip-broken to work around the problem

내가 무엇을 놓치고 있나요? 감사해요.

답변1

이 패치는 이제 Fedora 20 안정 릴리스에 포함되었습니다. 간단한

#yumupdate

루트가 문제를 해결하거나

$ sudo 냠 업데이트

루트로 실행하고 위의 다른 답변에 대한 응답을 원하지 않는 경우

수정 사항이 1.0.1g 분기에서 Fedora용 1.0.1e로 백포트되었습니다. 참조번호여기더 알아보기.

잊지 마요재시작, 영향을 받는 서비스 또는 전체 상자가 바람직합니다. 그렇게 하지 않으면 여전히 취약한 상태가 됩니다.

장소를 테스트하십시오:

  • http://filippo.io/Heartbleed/
  • https://www.ssllabs.com/ssltest/

OT로 돌아가기: 위의 ​​수정 사항은 openssl-libs(동일한 버전)가 있는 경우 해당 항목을 기본 컴파일로도 가져와야 할 수 있음을 나타냅니다.

답변2

1.01e에 문제가 있는 줄 알았는데?

Life Hacker 및 기타 사이트에서: "Heartbleed 버그는 이제 특정 버전의 OpenSSL(1.0.1 ~ 1.0.1f)을 실행하는 모든 웹 사이트 및 서비스에 영향을 미치는 것으로 알려져 있습니다."

답변3

정답은

sudo yum localinstall openssl-libs-1.0.1e-37.fc20.1.x86_64.rpm  openssl-1.0.1e-37.fc20.1.x86_64.rpm

가장 중요한 것은하나철사.

즉, SSL과 libs를 동시에 설치하면 순환 의존성이 해결됩니다.

이거에서 받았어https://library.linode.com/security/openssl-heartbleed

관련 정보