OpenSSL secirity issues

Projet:Trisquel
Version:6.0
Composant:Packages
Catégorie:Rapporter un bogue
Priorité:critical
Attribué:Non assigné
Statut:closed
Description

OpenSSL has a two year old vulnerability that got fixed yesterday. [1]

To check your OpenSSL version:

openssl version -a

OpenSSL 1.0.1 14 Mar 2012
built on: Wed Jan 8 20:50:06 UTC 2014

Build date should be post 7th of April 2014

Certificates should be regenerated as well.

It seems there is no fix for Trisquel yet.

[1] http://heartbleed.com/

mar, 04/08/2014 - 12:46
Statut:active» closed

An updated package was released by Ruben. The updated version build time is "Mon Apr 7 20:31:55 UTC 2014" and beyond.

Thanks!