New vulnerability discovered in openssl in 2016 and how to fix it

There are a lot of vulnerabilities that have been exposed recently, so website builders still need to pay more attention to security aspects and apply patches frequently. The maintainers of the OpenSSl cryptographic library have released a patch for a high-risk security vulnerability (CVE-2016-2107), which allows an attacker to decrypt login credentials or execute malicious code on the web server, and have also released a corresponding fix! Some friends may say that I did not install OpenSSl. In fact, openssl is a basic thing in the system, and most of it has been installed automatically. Therefore, this site will transfer the repair method to the small site for friends to check!

Upgrade openssl environment to openssl-1.0.2h

1. View source version
[root@7vps ]# openssl version -a
OpenSSL 1.0.1e

2. Download openssl-1.0.2h.tar.gz
wget https://www.openssl.org/source/openssl-1.0.2h.tar.gz
3. Update zlib
yum install -y zlib
4. Unzip and install
tar zxf openssl-1.0.2h.tar.gz
cd openssl-1.0.2h
./config shared zlib
make
make install
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
echo “/usr/local/ssl/lib” >> /etc/ld.so.conf
ldconfig -v
5. Check whether the upgrade is successful
[root@7vps ~]# openssl version -a
OpenSSL 1.0.2h 3 May 2016

Just follow the above steps and the upgrade will be completed in about 5 minutes! If you use the openssl version -a command and find that it is not installed, you don’t need to install it! hey-hey!

Recommended site search: domain name space, host discount code, free linux host, free external network server, foreign free space, foreign free website server, 6 yuan a year cloud server, icp website registration, registration space, Hong Kong vps host Rent,