如何在Ubuntu Server 12.04 LTS上升级OpenSSL? (Heartbleed)

如何使用Ubuntu的存储库升级OpenSSL?

我在http://www.ubuntu.com/usn/usn-2165-1/上看到USN

和这里的包https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.12

但我找不到如何使用它升级我的OpenSSL版本的说明。

标准更新命令不会升级我的ssl版本:

sudo apt-get update sudo apt-get dist-upgrade openssl OpenSSL> version OpenSSL 1.0.1 14 Mar 2012 

如何从存储库获取最新版本?

编辑:

dpkg –list openssl

 ||/ Name Version Description +++-=========================-=========================-================================================================== ii openssl 1.0.1-4ubuntu5.12 Secure Socket Layer (SSL) binary and related cryptographic tools 

aptitude show libssl1.0.0

 Package: libssl1.0.0 State: installed Automatically installed: no Multi-Arch: same Version: 1.0.1-4ubuntu5.12 Priority: required Section: libs Maintainer: Ubuntu Developers <[email protected]> Architecture: amd64 Uncompressed Size: 2,991 k Depends: libc6 (>= 2.14), zlib1g (>= 1:1.1.4), debconf (>= 0.5) | debconf-2.0 PreDepends: multiarch-support Breaks: openssh-client (< 1:5.9p1-4), openssh-client (< 1:5.9p1-4), openssh-server (< 1:5.9p1-4), openssh-server (< 1:5.9p1-4), libssl1.0.0 (!= 1.0.1-4ubuntu5.12) Replaces: libssl1.0.0 (< 1.0.1-4ubuntu5.12) Description: SSL shared libraries libssl and libcrypto shared libraries needed by programs like apache-ssl, telnet-ssl and openssh. It is part of the OpenSSL implementation of SSL. 

你可以做aptitude show libssl1.0.0吗? 如果你使用apt-get dist-upgrade并重新启动,你可能有正确的补丁版本,但是它不会在openssh版本中显示,因为ubuntu包装程序不同。 编辑:错字

sudo apt-get update

sudo apt-get升级

另外不要忘记使用OpenSSL重新启动服务