Fedora 20 Heartbleed openssl 修复

2024-5-21 • tag-icon

我只是想修复 Fedora Core 20 上与 OpenSSL 相关的 Heartbleed 错误。我尝试按照此处描述的说明进行操作：

http://www.forums.fedoraforum.org/showthread.php?t=298372

即安装包如下：

yum -y install koji
koji download-build --arch=x86_64 openssl-1.0.1e-37.fc20.1
yum localinstall openssl-1.0.1e-37.fc20.1.x86_64.rpm

但是，我不断遇到这个错误：

Error: Package: 1:openssl-1.0.1e-37.fc20.1.x86_64 (/openssl-1.0.1e-37.fc20.1.x86_64)
       Requires: openssl-libs(x86-64) = 1:1.0.1e-37.fc20.1
       Installed: 1:openssl-libs-1.0.1e-37.fc20.x86_64 (@updates)
           openssl-libs(x86-64) = 1:1.0.1e-37.fc20
       Available: 1:openssl-libs-1.0.1e-30.fc20.x86_64 (fedora)
           openssl-libs(x86-64) = 1:1.0.1e-30.fc20
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest

我尝试单独安装 openssl-libs 但遇到此错误：

Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libssl.so.10(libssl.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10(libssl.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10(libssl.so.10)
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libssl.so.10(libssl.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10(libssl.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10(libssl.so.10)
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: 1:cups-libs-1.7.1-8.fc20.i686 (@updates)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
Error: Package: VirtualGL-2.3.3-2.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(OPENSSL_1.0.1)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(OPENSSL_1.0.1)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(OPENSSL_1.0.1)
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libcrypto.so.10(libcrypto.so.10)
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10(libcrypto.so.10)
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10(libcrypto.so.10)
Error: Package: libssh2-1.4.3-8.fc20.i686 (@fedora)
       Requires: libcrypto.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libcrypto.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libcrypto.so.10
Error: Package: trousers-0.3.11.2-3.fc20.i686 (@updates)
       Requires: libssl.so.10
       Removing: 1:openssl-libs-1.0.1e-37.fc20.i686 (@updates)
           libssl.so.10
       Updated By: 1:openssl-libs-1.0.1e-37.fc20.1.x86_64 (/openssl-libs-1.0.1e-37.fc20.1.x86_64)
           Not found
       Available: 1:openssl-libs-1.0.1e-30.fc20.i686 (fedora)
           libssl.so.10
 You could try using --skip-broken to work around the problem

我缺少什么？谢谢。

答案1

该补丁现已包含在 Fedora 20 稳定版中。一个简单的

# 百胜更新

root 会解决你的问题，或者

$ sudo yum 更新

如果您不想以 root 身份运行

并回答上面的其他答案，则修复已从 1.0.1g 分支反向移植到 Fedora 的 1.0.1e 中。参考号这里了解详情。

不要忘记重启，要么受影响的服务，最好是整个盒子。不这样做仍然会让您变得脆弱。

测试地点：

http://filippo.io/Heartbleed/
https://www.ssllabs.com/ssltest/

放回 OT：上面的修复确实注意到，如果您有 openssl-libs（相同版本），您可能还必须将它们作为本地编译来获取。

答案2

我以为1.01e有问题？

来自 Life Hacker 和其他网站：“现在已知的 Heartbleed 错误会影响运行特定版本 OpenSSL（1.0.1 到 1.0.1f）的任何网站和服务”

答案3

答案是

sudo yum localinstall openssl-libs-1.0.1e-37.fc20.1.x86_64.rpm  openssl-1.0.1e-37.fc20.1.x86_64.rpm

最重要的是一线。

即同时安装 ssl 和 libs，循环依赖就解决了。

得到这个来自https://library.linode.com/security/openssl-heartbleed

答案1

测试地点：

答案2

答案3

相关内容