Actually Ubuntu is not affected because it already has SSLv2 disabled: http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-0800.html http://people.ca

Actually Ubuntu is not affected because it already has SSLv2 disabled: http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-0800.html http://people.canonical.com/~ubuntu-security/cve/2016/CVE-20... You won't see a fix appear in the changelog because there is nothing to fix in the Ubuntu packages.