Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

is there any 100% working method to update openssl to the non vulnerable version on Debian Wheezy. I do not want to upgrade the whole OS, nor would I like to install a non official package.

Is there any solution right now ?


share|improve this question

marked as duplicate by Nathan C, MadHatter, Dave M, Rex, Michael Hampton Apr 9 '14 at 13:44

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 4 down vote accepted

from DSA-2896-1 openssl -- security update :

For the stable distribution (wheezy), this problem has been fixed in version 1.0.1e-2+deb7u5.

so, assuming you have:

deb wheezy/updates main contrib non-free

in your /etc/apt/sources.list file

apt-get update
apt-cache policy openssl
apt-get install openssl

apt-cache policy openssl will show you candidate updates

apt-get install openssl will upgrade to last openssl version

run again apt-cache policy openssl and check version at Installed: line is equal or superior to: 1.0.1e-2+deb7u5

upgrading openssl package should upgrade libssl1.0.0 as it's a dependency

share|improve this answer
I did exactly that but it seems I needed a reboot. Thanks ! – Patrick Apr 9 '14 at 12:21
reboot is the safe way. you can avoid reboot by identifying which processes use outdated libs and restart them specifically. lsof +aL1 /usr | grep ssl should help you in this quest – exeral Apr 9 '14 at 12:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.