Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am having a strange problem, my system is exposed to heartbleed, and I am trying to fix it by using: apt-get clean,
apt-get update
apt-get upgrade openssl

but the response is:

Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
openssl is already the newest version.
The following packages have been kept back:
  libncurses5 libncursesw5 libssl-dev
0 upgraded, 0 newly installed, 0 to remove and 3 not upgraded.

my openssl version is:
openssl version -a

OpenSSL 1.0.1f-dev xx XXX xxxx
built on: Mon Dec 23 14:23:57 UTC 2013
platform: debian-amd64
options:  bn(64,64) rc4(8x,int) des(idx,cisc,16,int) blowfish(idx)
OPENSSLDIR: "/usr/lib/ssl"

openssl version -b

built on: Mon Dec 23 14:23:57 UTC 2013

I had thought that the problem is in the sources list and here is my sources list:

#deb stable main contrib

#deb wheezy-updates main contrib

#deb wheezy/updates main contrib
deb wheezy main
deb-src wheezy main

deb wheezy-updates main
deb-src wheezy-updates main

deb wheezy/updates main
deb-src wheezy/updates main

you can see the old ones in comment, but updating and trying to upgrade even with apt-get upgrade make no progress.

My serevr is on rackspace if it's somehow relevant...

I really don't know what to do, please help me.

share|improve this question
yes I had tried... –  Wazime May 2 '14 at 10:42
I'm no debian guru, but if I correctly understand this answer, Wheezy should be on 1.0.1e. Have you perchance installed your own version of OpenSSL? –  MadHatter May 2 '14 at 11:15
yes I had, and thanks for the clue :-) –  Wazime May 10 '14 at 0:17

2 Answers 2

up vote 4 down vote accepted

Thanks all for your efforts, here is how I had solved it:
apparently my openssl was from a test package instead of stable one. so the aptitude always thought the package is up to date.

in order to fix it I had run the next commands:
apt-get install openssl=1.0.1a-2+deb7u7
apt-get install libssl1.0.0=1.0.1e-2+deb7u7

it forced debian to install this packages with the exact version. and now it works

share|improve this answer
I'll take that as a resounding "yes" to my question above, then! Thank you for coming back and posting a cogent answer to your own question; this may help others in future. Don't forget to accept it by clicking the tick outline next to it, once the site will permit that. –  MadHatter May 7 '14 at 7:35


apt-get install openssl

That should force Debian reinstalling/upgrading only the OpenSSL again. See what version it installs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.