re heartbleed, I'm trying to upgrade openssl, WITHOUT upgrading all packages on my system
so I am running
apt-get install openssl as shown here, it's implied that doing this should upgrade openssl: How to upgrade a single package using apt-get?
I verify via apt-cache that it's installed:
root@nyc2-04-www:~# apt-cache policy openssl openssl: Installed: 1.0.1g-1 Candidate: 1.0.1g-2 Version table: 1.0.1g-2 0 500 http://http.debian.net/debian/ sid/main amd64 Packages *** 1.0.1g-1 0 100 /var/lib/dpkg/status 1.0.1e-2+deb7u6 0 500 http://security.debian.org/ wheezy/updates/main amd64 Packages 1.0.1e-2+deb7u4 0 500 http://ftp.us.debian.org/debian/ wheezy/main amd64 Packages 500 http://http.debian.net/debian/ wheezy/main amd64 Packages
however after rebooting, i see that the old vunerable openssl is still active. running
openssl version -a shows that 1.0.1f is still active.
also confirmed that my server is still vunerable to heartbleed via http://filippo.io/Heartbleed/#www.uat.phantomjscloud.com EDIT: fyi i took down nginx so I'm not leaving a vunerable server on the internet.
That's my uat server. I already did a full
apt-get upgrade on my production server and that succsesfully updates openssl.
but back to my question: how can I upgrade openssl without upgrading all packages?