openssl - HAProxy SSL 和 Heartbleed 漏洞利用

Question

对于 openSSL Heartbleed 漏洞利用，我假设使用 openSSL 包编译 HAproxy 将意味着它易受攻击。更新的过程是什么？更新 openSSL 并重新编译 HAProxy？

Answer 1

If you are using one of the affected OpenSSL versions (1.0.1 through 1.0.1f), update to version 1.0.1g where the exploit has been addressed.

http://www.kb.cert.org/vuls/id/720951