Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I still have an Ubuntu 13.04 Raring Ring server that I am running. I need to patch it for Heartbleed / cve-2014-0160 bug, but Canical no longer is supporting it. What do I do?

References:

  1. http://www.ubuntu.com/usn/usn-2165-1/
  2. How to patch CVE-2014-0160 in OpenSSL?
share|improve this question

closed as off-topic by Mateo, Oli Apr 10 at 0:50

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

5  
Heartbeat is the least of your issues. You're running an old version of Ubuntu that hasn't received security updates since January. You need to upgrade immediately. See the close message for more information. –  Oli Apr 10 at 0:49
3  
Even going back to 12.04 (LTS, so supported until 2017) would be better than poddling around on 13.04. –  Oli Apr 10 at 1:00
2  
I don't think Ubuntu is supporting this release. Here are the list of releases it officially announced.I don't think it is a stable release of Ubuntu. wiki.ubuntu.com/Home –  Sai Apr 10 at 8:10
5  
Just wondering, how is being unsupported by Ubuntu makes such a question offtopic? –  user138589 Apr 10 at 13:48
3  
This question is being discussed at meta.askubuntu.com/questions/8888/… –  don.joey Apr 14 at 11:18

1 Answer 1

up vote 6 down vote accepted

First and foremost, and as a matter of urgency, upgrade (or downgrade) to a supported version of Ubuntu.

In the interim, if you can not upgrade right away, then this is what I did:

I used the patched openssl and libssl version from Quantal Quetzal 12.10:

https://launchpad.net/ubuntu/+source/openssl

wget https://launchpad.net/ubuntu/+archive/primary/+files/openssl_1.0.1c-3ubuntu2.7_amd64.deb \
https://launchpad.net/ubuntu/+archive/primary/+files/libssl1.0.0_1.0.1c-3ubuntu2.7_amd64.deb \
https://launchpad.net/ubuntu/+archive/primary/+files/libssl1.0.0_1.0.1c-3ubuntu2.7_i386.deb \
https://launchpad.net/ubuntu/+archive/primary/+files/libssl-dev_1.0.1c-3ubuntu2.7_amd64.deb

sudo dpkg -i openssl_1.0.1c-3ubuntu2.7_amd64.deb \
libssl1.0.0_1.0.1c-3ubuntu2.7_amd64.deb \
libssl1.0.0_1.0.1c-3ubuntu2.7_i386.deb \
libssl-dev_1.0.1c-3ubuntu2.7_amd64.deb

sudo /etc/init.d/apache2 restart

I then revoked the old certificates and regenerated new ones.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.