Projekt: | Trisquel |
Version: | 6.0 |
Komponente: | Packages |
Kategorie: | Fehlerbericht |
Priorität: | critical |
Zugewiesen: | nicht zugewiesen |
Status: | closed |
OpenSSL has a two year old vulnerability that got fixed yesterday. [1]
To check your OpenSSL version:
openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Wed Jan 8 20:50:06 UTC 2014
Build date should be post 7th of April 2014
Certificates should be regenerated as well.
It seems there is no fix for Trisquel yet.
[1] http://heartbleed.com/
An updated package was released by Ruben. The updated version build time is "Mon Apr 7 20:31:55 UTC 2014" and beyond.
Thanks!