OpenSSL secirity issues

Proxecto:Trisquel
Versión:6.0
Componente:Packages
Categoría:informe de erro
Prioridade:critical
Asignado:Sen asignar
Estado:closed
Descrición

OpenSSL has a two year old vulnerability that got fixed yesterday. [1]

To check your OpenSSL version:

openssl version -a

OpenSSL 1.0.1 14 Mar 2012
built on: Wed Jan 8 20:50:06 UTC 2014

Build date should be post 7th of April 2014

Certificates should be regenerated as well.

It seems there is no fix for Trisquel yet.

[1] http://heartbleed.com/

Mar, 04/08/2014 - 11:46
Estado:active» closed

An updated package was released by Ruben. The updated version build time is "Mon Apr 7 20:31:55 UTC 2014" and beyond.

Thanks!