修復CentOS 6.5 OpenSSL CVE-2014-0160資安漏洞的方法
根據 Heartbleed Bug 的揭露，OpenSSL發生了一個嚴重的資安問題。受到影響的Linux有下列幾項
- Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4
- Ubuntu 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11
- CentOS 6.5, OpenSSL 1.0.1e-15
- Fedora 18, OpenSSL 1.0.1e-4
- OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012)
- FreeBSD 8.4 (OpenSSL 1.0.1e) and 9.1 (OpenSSL 1.0.1c)
- NetBSD 5.0.2 (OpenSSL 1.0.1e)
- OpenSUSE 12.2 (OpenSSL 1.0.1c)
阿維自己剛有幾台機器是使用CentOS 6.5架設的，這樣的資安問題當然要趕緊修復，以下就跟大家分享修復的方式
執行 yum update openssl
Installed Packages
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5.4
Size : 4.0 M
Repo : installed
From repo : ami-updates
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
: between machines. OpenSSL includes a certificate management tool
: and shared libraries which provide various cryptographic
: algorithms and protocols.</code>
Available Packages
Name : openssl
Arch : i686
Version : 1.0.1e
Release : 16.el6_5.7
Size : 1.5 M
Repo : updates
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
: between machines. OpenSSL includes a certificate management tool
: and shared libraries which provide various cryptographic
: algorithms and protocols.
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5.7
Size : 1.5 M
Repo : updates
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
: between machines. OpenSSL includes a certificate management tool
: and shared libraries which provide various cryptographic
: algorithms and protocols.
注意! 不是更新完就沒事了，記得要做下面的動作
lsof -n | grep ssl | grep DEL
執行這段指令之後，會列出需要重新啟動的服務，記得將列出的服務全部重新啟動一次。
重新啟動服務之後，再執行一次這段指令，確保所有需要重新啟動的服務都已經完成重新啟動。
原文出處： 修復CentOS 6.5 OpenSSL CVE-2014-0160資安漏洞的方法 阿維雜記本 (Wei's Blog)
[轉貼]OpenSSL CVE-2014-0160 Heartbleed 嚴重漏洞 (冷日