Aggiornamento OpenSSL

Selezione_326Chi si occupa di sicurezza informatica ricorderà sicuramente quanto accaduto ai tempi di quello che è stato fin da subito chiamato Heartbleed. Si trattava di un alquanto insidioso bug, annidato nella libreria crittografica open-source, OpenSSL. Ebbene due righe soltanto per comunicare che — ben prima di quei noti fatti, e maggior ragione anche dopo — tutti i server afferenti alla nostra infrastruttura di rete hanno sempre visto aggiornato OpenSSL, man mano che le patch di sicurezza venivano rilasciate dalle comunità di sviluppo.
Riportiamo qui di seguito i due ultimi interventi di manutenzione evolutiva che hanno coinvolto il nostro principale server e quello ausiliario.

Server principale

[20150609.014558]   Processing: Updating system packages
[20150609.014558]    – Processing command `/usr/local/cpanel/scripts/rpmup`
[20150609.014558]      [289152] checkyum version 22.3
[20150609.014706]      [289152] Loaded plugins: fastestmirror, rhnplugin
[20150609.014706]      [289152] Setting up Update Process
[20150609.014706]      [289152] Loading mirror speeds from cached hostfile
[20150609.014706]      [289152]  * cloudlinux-x86_64-server-6: cl-mirror.cloud.dk
[20150609.014706]      [289152]  * epel: mirror1.babylon.network
[20150609.014706]      [289152]  * rpmfusion-free-updates: www.mirrorservice.org
[20150609.014706]      [289152] [1;30;41mhttp://mirror1.babylon.network/epel/6/x86_64/repodata/repomd.xml: [Errno -1] repomd.xml does not match metalink for epel[0m
[20150609.014706]      [289152] [1;30;41mTrying other mirror.[0m
[20150609.014706]      [289152] [1;30;41mhttp://mirrors.coreix.net/fedora-epel/6/x86_64/repodata/repomd.xml: [Errno -1] repomd.xml does not match metalink for epel[0m
[20150609.014706]      [289152] [1;30;41mTrying other mirror.[0m
[20150609.014706]      [289152] Resolving Dependencies
[20150609.014706]      [289152] –> Running transaction check
[20150609.014706]      [289152] —> Package openssl.x86_64 0:1.0.1e-30.el6_6.8 will be updated
[20150609.014706]      [289152] —> Package openssl.x86_64 0:1.0.1e-30.el6.9 will be an update
[20150609.014706]      [289152] —> Package openssl-devel.x86_64 0:1.0.1e-30.el6_6.8 will be updated
[20150609.014706]      [289152] —> Package openssl-devel.x86_64 0:1.0.1e-30.el6.9 will be an update
[20150609.014706]      [289152] –> Finished Dependency Resolution
[20150609.014706]      [289152]
[20150609.014706]      [289152]
[20150609.014706]      [289152] Total download size: 2.7 M
[20150609.014706]      [289152] Downloading Packages:
[20150609.014706]      [289152] ——————————————————————————–
[20150609.014706]      [289152] Total                                           1.3 MB/s | 2.7 MB     00:02
[20150609.014706]      [289152] Running rpm_check_debug
[20150609.014706]      [289152] Running Transaction Test
[20150609.014706]      [289152] Transaction Test Succeeded
[20150609.014706]      [289152] Running Transaction
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4Complete!
[20150609.014706]      [289152]
[20150609.014706]   Updating   : openssl-1.0.1e-30.el6.9.x86_64                               1/4
[20150609.014706]      [289152] checkyum version 22.3
[20150609.014706]   28% complete
[20150609.014706]    – Processing command `/usr/local/cpanel/scripts/sysup`
[20150609.014708]      [289441]   All Needed RPMS are installed.

Server ausiliario

[20150616.014647]   Processing: Updating system packages
[20150616.014647]    – Processing command `/usr/local/cpanel/scripts/rpmup`
[20150616.014648]      [16927] checkyum version 22.3
[20150616.014957]      [16927] Loaded plugins: fastestmirror
[20150616.014957]      [16927] Setting up Update Process
[20150616.014957]      [16927] Loading mirror speeds from cached hostfile
[20150616.014957]      [16927]  * base: centosmirror.netcup.net
[20150616.014957]      [16927]  * extras: centosmirror.netcup.net
[20150616.014957]      [16927]  * updates: centosmirror.netcup.net
[20150616.014957]      [16927] Resolving Dependencies
[20150616.014957]      [16927] –> Running transaction check
[20150616.014957]      [16927] —> Package openssl.x86_64 0:1.0.1e-30.el6.9 will be updated
[20150616.014957]      [16927] —> Package openssl.x86_64 0:1.0.1e-30.el6.11 will be an update
[20150616.014957]      [16927] —> Package openssl-devel.x86_64 0:1.0.1e-30.el6.9 will be updated
[20150616.014957]      [16927] —> Package openssl-devel.x86_64 0:1.0.1e-30.el6.11 will be an update
[20150616.014957]      [16927] –> Finished Dependency Resolution
[20150616.014957]      [16927]
[20150616.014957]      [16927]
[20150616.014957]      [16927] Total download size: 2.7 M
[20150616.014957]      [16927] Downloading Packages:
[20150616.014957]      [16927] ——————————————————————————–
[20150616.014957]      [16927] Total                                           1.2 MB/s | 2.7 MB     00:02
[20150616.014957]      [16927] Running rpm_check_debug
[20150616.014957]      [16927] Running Transaction Test
[20150616.014957]      [16927] Transaction Test Succeeded
[20150616.014957]      [16927] Running Transaction
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4Complete!
[20150616.014957]      [16927]
[20150616.014957]   Updating   : openssl-1.0.1e-30.el6.11.x86_64                              1/4
[20150616.014957]      [16927] checkyum version 22.3
[20150616.014957]   28% complete
[20150616.014957]    – Processing command `/usr/local/cpanel/scripts/sysup`
[20150616.014958]      [17015]   All Needed RPMS are installed.

Tags: ,

No comments yet.

Lascia un commento