2
votes
1answer
10k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
4
votes
2answers
7k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
9
votes
0answers
8k views

Am I affected? Heartbleed bug [duplicate]

I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
0
votes
1answer
707 views

Ubuntu 14.04.1 LTS and OpenSSL [duplicate]

Does Ubuntu Ubuntu 14.04.1 LTS have any OpenSSL vulnerabilities in connection with the Heartbleed bug? I downloaded the ISO today and I am installing it and I would like to know if there are any ...
1
vote
1answer
223 views

Does Ubuntu provide patched version of openssl for 12.10? [duplicate]

12.10 is right at end of life in April 2014.
0
votes
0answers
180 views

What does the Heartbleed bug mean for Ubuntu? Is Ubuntu not as secure as I thought? [duplicate]

I hope this question isn't closed for being subjective because I think there is a correct answer somewhere, even if it's a wiki-style explanation answer. One reason for using open source software for ...
0
votes
0answers
26 views

Ubuntu 14.04 LTS and Heartbleed bug [duplicate]

Does Ubuntu 14.04 LTS on it's own, the desktop version and not the server version, contain any Heartbleed bug vulnerabilities? I need to install this on a business laptop and I don't want to open up ...
18
votes
3answers
18k views

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can ...
10
votes
2answers
11k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
6
votes
3answers
9k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
2
votes
4answers
547 views

I am using Ubuntu 12.04 as live desktop CD for banking am I subject to the Heartbleed bug?

I am not running any Apache or any thing that triggers ssl libray, so is there a service in Ubuntu that runs Open ssl by default? So, I am just booting live session for internet browser. Am I safe?
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

Since I have not enough reputation to comment an existing Answer, I create this new question. I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I upgraded all ...
1
vote
2answers
177 views

OpenSSL getting rollback automatically to default version in Ubuntu 12.04.4

I have installed Ubuntu 12.04.4 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1h version by refering this link. I have applied patch ...