Я пытаюсь обновить версию openssl с 0.9.8w до 0.9.8 y, чтобы устранить следующие уязвимости безопасности CVE-2012-2333, CVE-2013-0166, CVE-2013-0169.
При попытке обновления я сталкиваюсь со следующими зависимостями, и я буду очень признателен за любое понимание этого.
[root@CAM store]# openssl version
OpenSSL 0.9.8w 23 Apr 2012
[root@CAM store]# rpm -qa | grep openssl
openssl-0.9.8e-22.el5
openssl-0.9.8w-1
[root@CAM store]# rpm -Uvh openssl-0.9.8y-1.i386.rpm
error: Failed dependencies:
libcrypto.so.6 is needed by (installed) m2crypto-0.16-8.el5.i386
libcrypto.so.6 is needed by (installed) python-libs-2.4.3-46.el5.i386
libcrypto.so.6 is needed by (installed) openldap-2.3.43-25.el5.i386
libcrypto.so.6 is needed by (installed) net-snmp-libs-5.3.2.2-17.el5.i386
libcrypto.so.6 is needed by (installed) postgresql-libs-8.1.23-1PGDG.rhel5.i386
libcrypto.so.6 is needed by (installed) bind-libs-9.3.6-20.P1.el5.i386
libcrypto.so.6 is needed by (installed) curl-7.15.5-15.el5.i386
libcrypto.so.6 is needed by (installed) libnasl2-2.2.11-27.el5.i386
libcrypto.so.6 is needed by (installed) nmap-4.11-2.i386
libcrypto.so.6 is needed by (installed) wget-1.11.4-2.el5_4.1.i386
libcrypto.so.6 is needed by (installed) nessus-server-2.2.11-27.el5.i386
libcrypto.so.6 is needed by (installed) cyrus-sasl-2.1.22-5.el5_4.3.i386
libcrypto.so.6 is needed by (installed) bind-utils-9.3.6-20.P1.el5.i386
libcrypto.so.6 is needed by (installed) neon-0.25.5-10.el5_4.1.i386
libcrypto.so.6 is needed by (installed) openldap-clients-2.3.43-25.el5.i386
libcrypto.so.6 is needed by (installed) cyrus-sasl-md5-2.1.22-5.el5_4.3.i386
libcrypto.so.6 is needed by (installed) stunnel-4.15-2.el5.1.i386
libcrypto.so.6 is needed by (installed) distcache-1.4.5-14.1.i386
libcrypto.so.6 is needed by (installed) tcpdump-3.9.4-15.el5.i386
libcrypto.so.6 is needed by (installed) ntp-4.2.2p1-15.el5.centos.1.i386
libcrypto.so.6 is needed by (installed) net-snmp-5.3.2.2-17.el5.i386
libcrypto.so.6 is needed by (installed) fipscheck-1.2.0-1.el5.i386
libcrypto.so.6 is needed by (installed) net-snmp-utils-5.3.2.2-17.el5.i386
libcrypto.so.6 is needed by (installed) postgresql-8.1.23-1PGDG.rhel5.i386
libcrypto.so.6 is needed by (installed) postgresql-server-8.1.23-1PGDG.rhel5.i386
libcrypto.so.6 is needed by (installed) postgresql-contrib-8.1.23-1PGDG.rhel5.i386
libcrypto.so.6 is needed by (installed) cavium-1.0-7.i386
libssl.so.6 is needed by (installed) m2crypto-0.16-8.el5.i386
libssl.so.6 is needed by (installed) python-libs-2.4.3-46.el5.i386
libssl.so.6 is needed by (installed) openldap-2.3.43-25.el5.i386
libssl.so.6 is needed by (installed) postgresql-libs-8.1.23-1PGDG.rhel5.i386
libssl.so.6 is needed by (installed) curl-7.15.5-15.el5.i386
libssl.so.6 is needed by (installed) libnasl2-2.2.11-27.el5.i386
libssl.so.6 is needed by (installed) nmap-4.11-2.i386
libssl.so.6 is needed by (installed) wget-1.11.4-2.el5_4.1.i386
libssl.so.6 is needed by (installed) nessus-server-2.2.11-27.el5.i386
libssl.so.6 is needed by (installed) neon-0.25.5-10.el5_4.1.i386
libssl.so.6 is needed by (installed) quota-3.13-5.el5.i386
libssl.so.6 is needed by (installed) openldap-clients-2.3.43-25.el5.i386
libssl.so.6 is needed by (installed) stunnel-4.15-2.el5.1.i386
libssl.so.6 is needed by (installed) distcache-1.4.5-14.1.i386
libssl.so.6 is needed by (installed) postgresql-8.1.23-1PGDG.rhel5.i386
libssl.so.6 is needed by (installed) postgresql-server-8.1.23-1PGDG.rhel5.i386
libssl.so.6 is needed by (installed) postgresql-contrib-8.1.23-1PGDG.rhel5.i386
Спасибо, Vetrichelvan.G
Я не знаю, откуда у вас этот RPM (поскольку вы нам не сообщаете), но у вас уже есть проблема:
[root@CAM store]# rpm -qa | grep openssl
openssl-0.9.8e-22.el5
openssl-0.9.8w-1
Кто-то подобрал в вашу систему второй RPM OpenSSL в дополнение к предоставленному RedHat, вероятно, как неправильный ответ на более раннюю проблему OpenSSL.
Вам не нужно обновлять версию openssl, чтобы оставаться в исправном состоянии. Вам нужно избавиться от странных версий, не относящихся к дистрибутивам, и не отставать от патчей Red Hat для EL5 (если они поддерживаются). Это будет означать, что ваша версия openssl-0.9.8e останется исправленной, и даже если номер версии OpenSSL не изменится, версия RPM изменится.
Вы можете найти этот ответ проливает больше света на способ исправления уязвимостей Red Hat backport, вместо того, чтобы постоянно менять номера версий приложений.