NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on.
I am seeing conflicting information with respect to Ubuntu 12.04:
- The Heartbleed page claims Ubuntu 12.04 to be affected and needs to be patched with 1.0.1g
- The Ubuntu Security Notice USN-2165-1 claims that version
1.0.1-4ubuntu5.12
for the packagelibssl1.0.0
should fix the issue on Ubuntu 12.04.
Now I do have these packages installed:
# dpkg -l | grep ssl
ii libssl1.0.0 1.0.1-4ubuntu5.10 SSL shared libraries
ii openssl 1.0.1-4ubuntu5.10 Secure Socket Layer (SSL) binary and related cryptographic tools
# lsb_release -a | grep -i description
Description: Ubuntu 12.04.3 LTS
So, If I consider above two points, I am not sure which one is true.
Besides, this Heartbleed test page says that my machine is vulnerable.
Has anyone yet been able to fix this issue successfully on Ubuntu 12.04? If yes, then could you provide me the steps you have taken?
1.0.1g
shows up only if it is installed via source. If it installed via theapt-get
, it shows1.0.1-4ubuntu5.12
. Please refer: ubuntu.com/usn/usn-2165-1