Projet: | Trisquel |
Version: | 6.0 |
Composant: | Packages |
Catégorie: | Rapporter un bogue |
Priorité: | critical |
Attribué: | Non assigné |
Statut: | closed |
OpenSSL has a two year old vulnerability that got fixed yesterday. [1]
To check your OpenSSL version:
openssl version -a
OpenSSL 1.0.1 14 Mar 2012
built on: Wed Jan 8 20:50:06 UTC 2014
Build date should be post 7th of April 2014
Certificates should be regenerated as well.
It seems there is no fix for Trisquel yet.
[1] http://heartbleed.com/
An updated package was released by Ruben. The updated version build time is "Mon Apr 7 20:31:55 UTC 2014" and beyond.
Thanks!