2
votes
1answer
12k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
3
votes
2answers
8k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
9
votes
0answers
8k views

Am I affected? Heartbleed bug [duplicate]

I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
0
votes
1answer
803 views

Ubuntu 14.04.1 LTS and OpenSSL [duplicate]

Does Ubuntu Ubuntu 14.04.1 LTS have any OpenSSL vulnerabilities in connection with the Heartbleed bug? I downloaded the ISO today and I am installing it and I would like to know if there are any ...
1
vote
1answer
255 views

Does Ubuntu provide patched version of openssl for 12.10? [duplicate]

12.10 is right at end of life in April 2014.
0
votes
0answers
189 views

What does the Heartbleed bug mean for Ubuntu? Is Ubuntu not as secure as I thought? [duplicate]

I hope this question isn't closed for being subjective because I think there is a correct answer somewhere, even if it's a wiki-style explanation answer. One reason for using open source software for ...
0
votes
0answers
26 views

Ubuntu 14.04 LTS and Heartbleed bug [duplicate]

Does Ubuntu 14.04 LTS on it's own, the desktop version and not the server version, contain any Heartbleed bug vulnerabilities? I need to install this on a business laptop and I don't want to open up ...
19
votes
3answers
18k views

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can ...
10
votes
2answers
11k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
6
votes
3answers
10k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to 1....
2
votes
3answers
9k views

OpenSSL remains vulnerable after update to 14.04

We have an AWS server running OpenVPN which was built using Ubuntu 13.10. After the announcement of the Heartbleed vulnerability, we updated the server. This morning, we upgraded the server to 14.04. ...
2
votes
4answers
561 views

I am using Ubuntu 12.04 as live desktop CD for banking am I subject to the Heartbleed bug?

I am not running any Apache or any thing that triggers ssl libray, so is there a service in Ubuntu that runs Open ssl by default? So, I am just booting live session for internet browser. Am I safe?
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

This is a new question after I saw the answer at "How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?". I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I ...
0
votes
1answer
2k views

I'm having ubuntu 14.04.4(server) with open ssl version 1.0.1f version. AM i vulnerable to heartbleed?

I'm having ubuntu 14.04.4(server) with open ssl version 1.0.1f version openssl: 1.0.1f 6 jan 2014 built on mon feb 29 18:11:15 UTC 2016 platform: debian-amd64 What i need to know is that am i ...

15 30 50 per page