Project: | Trisquel |
Version: | 6.0 |
Component: | Packages |
Category: | bug report |
Priority: | critical |
Assigned: | Unassigned |
Status: | closed |
OpenSSL has a two year old vulnerability that got fixed yesterday. [1]
To check your OpenSSL version:
openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Wed Jan 8 20:50:06 UTC 2014
Build date should be post 7th of April 2014
Certificates should be regenerated as well.
It seems there is no fix for Trisquel yet.
[1] http://heartbleed.com/
An updated package was released by Ruben. The updated version build time is "Mon Apr 7 20:31:55 UTC 2014" and beyond.
Thanks!