[kwlug-disc] Heartbleed OpenSSL bug

[Khalid Baheyeldin]

On Tue, Apr 8, 2014 at 7:38 PM, Bob Jonkman <bjonkman at sobac.com> wrote:

>
> On 14-04-08 12:09 PM, CrankyOldBugger wrote:
> > I just ran apt-get update && apt-get dist-upgrade on my Ubuntu
> > 13.10 laptop and saw both openSSL client and server in the mix, so,
> > as stated by the OP, fixes are out there...
>
> I too saw OpenSSL patches come in before I even knew there was a
> problem. But I still get this, even after a reboot:
>
> > Ubuntu 12.04.4:
> >> openssl version
> > OpenSSL 1.0.1 14 Mar 2012
> >
> > Ubuntu 13.10, Linux Mint 16 Petra, and Linux Mint Debian Edition
> >> openssl version
> > OpenSSL 1.0.1e 11 Feb 2013
>

/var/log/aptitude has this:

Aptitude 0.6.6: log report
Mon, Apr  7 2014 20:25:30 -0400

...
[UPGRADE] libssl-dev:amd64 1.0.1-4ubuntu5.11 -> 1.0.1-4ubuntu5.12
[UPGRADE] libssl-doc:amd64 1.0.1-4ubuntu5.11 -> 1.0.1-4ubuntu5.12
[UPGRADE] libssl1.0.0:amd64 1.0.1-4ubuntu5.11 -> 1.0.1-4ubuntu5.12
...
[UPGRADE] openssl:amd64 1.0.1-4ubuntu5.11 -> 1.0.1-4ubuntu5.12

$ dpkg -l | grep openssl
Shows the following:
ii  openssl                               1.0.1-4ubuntu5.12

Which means the update is applied.
-- 
Khalid M. Baheyeldin
2bits.com, Inc.
Fast Reliable Drupal
Drupal optimization, development, customization and consulting.
Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
Simplicity is the ultimate sophistication. --   Leonardo da Vinci
For every complex problem, there is an answer that is clear, simple, and
wrong." -- H.L. Mencken
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20140408/a5a62164/attachment.htm>