[Bug 1304651] Re: Heartbleed Bug

[James Lewis]

14.04 is released in 2 days but this fix does not seem to be applied...
the USN notification lists only up to 13.10, but as of today:-

james at trinity:~$ openssl version
OpenSSL 1.0.1f 6 Jan 2014

james at trinity:~$ date
Tue Apr 15 16:56:45 BST 2014

james at trinity:~$ more /etc/lsb-release 
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04
DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu 14.04 LTS"
james at trinity:~$

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1304651

Title:
  Heartbleed Bug

Status in “openssl” package in Ubuntu:
  Fix Released

Bug description:
  CVE-2014-0160

  http://heartbleed.com/

  Current version of openssl packaged for Ubuntu is 1.0.1f, need to
  upgrade to 1.0.1g, and need backports for legacy systems. This is a
  pretty serious bug...

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1304651/+subscriptions