Linked Questions

4
votes
2answers
6k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
2
votes
1answer
7k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
9
votes
0answers
8k views

Am I affected? Heartbleed bug [duplicate]

I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
0
votes
1answer
484 views

Ubuntu 14.04.1 LTS and OpenSSL [duplicate]

Does Ubuntu Ubuntu 14.04.1 LTS have any OpenSSL vulnerabilities in connection with the Heartbleed bug? I downloaded the ISO today and I am installing it and I would like to know if there are any ...
1
vote
1answer
219 views

Does Ubuntu provide patched version of openssl for 12.10? [duplicate]

12.10 is right at end of life in April 2014.
0
votes
0answers
168 views

What does the Heartbleed bug mean for Ubuntu? Is Ubuntu not as secure as I thought? [duplicate]

I hope this question isn't closed for being subjective because I think there is a correct answer somewhere, even if it's a wiki-style explanation answer. One reason for using open source software for ...
0
votes
0answers
25 views

Ubuntu 14.04 LTS and Heartbleed bug [duplicate]

Does Ubuntu 14.04 LTS on it's own, the desktop version and not the server version, contain any Heartbleed bug vulnerabilities? I need to install this on a business laptop and I don't want to open up ...
18
votes
3answers
18k views

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can ...
10
votes
2answers
10k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
5
votes
3answers
7k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

Since I have not enough reputation to comment an existing Answer, I create this new question. I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I upgraded all ...

15 30 50 per page