Is updating OpenSSL safe?

C

Christopher Carter2021-10-03 03:45:22

PHP

Christopher Carter, 2021-10-03 03:45:22

Hello, on the server site on php5.6 and OpenSSL version "OpenSSL 1.0.1t 3 May 2016". Will nothing break if you update OpenSSL? And then the OpenSSL update pulls the update of 300 packages on the server. Here is the version of the operating system.

Operating System: Debian GNU/Linux 8 (jessie)
Kernel: Linux 3.16.0-4-amd64
Architecture: x86-64

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

A

AVKor, 2021-10-03
@AVKor

Support for jessie ended a long time ago.
If you don't want problems, update OS version 8 ->9->10->11 and your site too.

C

chupasaurus, 2021-10-03
@chupasaurus

This is not an OpenSSL update that pulls 300 dependencies, and Jessie canceled the 2-year extended support precisely because of incompatibility with security fixes.

C

CityCat4, 2021-10-04
@CityCat4

Well, actually, the system is five years old, and it's not at all surprising that the openssl update dragged so many updates of other things with it.
And of course you need to upgrade. But first you need a backup of everything and everything, because:
- such an update will probably break in half
- even if it doesn’t break, it’s not at all a fact that everything will work as it should