Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

This question already has an answer here:

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?

share|improve this question

marked as duplicate by Florian Diesch, dobey, karel, Avinash Raj, Radu Rădeanu Apr 19 at 17:37

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
And see my answer to: askubuntu.com/questions/450076/… –  david6 Apr 19 at 0:44

2 Answers 2

up vote 3 down vote accepted

If I get this right you're secure:

openssl (1.0.1f-1ubuntu2) trusty; urgency=medium

  • SECURITY UPDATE: side-channel attack on Montgomery ladder implementation
    • debian/patches/CVE-2014-0076.patch: add and use constant time swap in crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c, util/libeay.num.
    • CVE-2014-0076
  • SECURITY UPDATE: memory disclosure in TLS heartbeat extension
    • debian/patches/CVE-2014-0160.patch: use correct lengths in ssl/d1_both.c, ssl/t1_lib.c.
    • CVE-2014-0160

-- Marc Deslauriers Mon, 07 Apr 2014 15:37:53 -0400

share|improve this answer

Yes, provided you've installed the latest updates. The latest version of openssl in the 14.04 repositories is 1.0.1f-1ubuntu2. You can check that you're running that version by opening a terminal and running: apt-cache show openssl | grep Version

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.