1.0.1h는 CVE-2014-0224 대책 버전입니다.
빨리 업데이트합시다.

버전 확인

OpenSSL 1.0.1g입니다.

$ openssl version
OpenSSL 1.0.1g 7 Apr 2014
$ brew info openssl
openssl: stable 1.0.1g (bottled)

먼저 homebrew 데이터베이스 업데이트

$ brew update

업데이트할 수 있는지 확인합니다.

$ brew info openssl
openssl: stable 1.0.1h (bottled)

업데이트할 수 있습니다.

OpenSSL 업데이트

$ brew upgrade openssl
==> Upgrading 1 outdated package, with result:
openssl 1.0.1h
==> Upgrading openssl
==> Downloading https://downloads.sf.net/project/machomebrew/Bottles/openssl-1.0
######################################################################## 100.0%
==> Pouring openssl-1.0.1h.mavericks.bottle.tar.gz
==> Caveats
A CA file has been bootstrapped using certificates from the system
keychain. To add additional certificates, place .pem files in
  /usr/local/etc/openssl/certs

and run
  /usr/local/opt/openssl/bin/c_rehash

This formula is keg-only, so it was not symlinked into /usr/local.

Mac OS X already provides this software and installing another version in
parallel can cause all kinds of trouble.

The OpenSSL provided by OS X is too old for some software.

Generally there are no consequences of this for you. If you build your
own software and it requires this formula, you'll need to add to your
build variables:

    LDFLAGS:  -L/usr/local/opt/openssl/lib
    CPPFLAGS: -I/usr/local/opt/openssl/include

==> Summary
🍺  /usr/local/Cellar/openssl/1.0.1h: 429 files, 14M

사용 가능한지 확인

$ openssl version
-bash: /usr/local/bin/openssl: No such file or directory
$ which openssl
/usr/bin/openssl

안돼요.brew upgrade openssl 로그에

This formula is keg-only, so it was not symlinked into /usr/local.

그리고 그렇듯이 아직 링크되지 않았습니다.

homebrew로 설치된 OpenSSL을 사용하도록 링크

$ brew link openssl --force
Linking /usr/local/Cellar/openssl/1.0.1h... 1139 symlinks created
$ openssl version
OpenSSL 1.0.1h 5 Jun 2014
$ which openssl
/usr/local/bin/openssl

이제 OpenSSL 1.0.1h를 사용할 수 있습니다.

Ruby 재설치

homebrew에서 OpenSSL의 취약성 대책판을 넣었기 때문에 Ruby도 갱신시킨다 - 별관 아들

기록된 기사

homebrew에서 OpenSSL을 1.0.1h로 업데이트 - 별관 아이코코코코