4 ms·
How does one go about installing this update on Ubuntu? "sudo apt-get upgrade openssl" didn't do it.
by zrail 13y ago
How does one go about installing this update on Ubuntu? "sudo apt-get upgrade openssl" didn't do it.
- vajorie 13y agoBy either compiling & installing it with -DOPENSSL_NO_HEARTBEATS or waiting for the security fix to be backported by ubuntu devs. http://heartbleed.com/ http://heartbleed.com/
- Andys 13y agoThe fix has now been released by Ubuntu, so you can upgrade via the normal methods (apt-get update && apt-get upgrade)
- specto 13y agoMake sure you check running daemons too... apt-get install debian-goodies; checkrestart
- rlpb 13y agoSee: http://www.ubuntu.com/usn/usn-2165-1/ http://www.ubuntu.com/usn/usn-2165-1/ The binary package name is "libssl1.0.0". You want "sudo apt-get update && sudo apt-get install libssl1.0.0", but I suggest that you take all security and regular updates (or set sources.list to security only updates if you insist). Then you can just run "sudo apt-get update && sudo apt-get dist-upgrade" to pick up all updates, without worrying about package names. If you want to verify if a particular vulnerability is fixed, look in /usr/share/doc/<package>/changelog.Debian.gz. In this case, you want /usr/share/doc/libssl1.0.0/changelog.Debian.gz. In this file, you'll see CVE-2014-0160 mentioned as fixed, which is the universal identifier of this vulnerability.