[Bug 1304651] Re: Heartbleed Bug

[James Lewis]

OK, apt-get changelog openssl shows that there is a backported fix (I
hate backported fixes because it makes it very hard to know if you have
a vulnerable version or not)...

I imagine having your version labeled 1.0.1f and dated in January will
probably generate more than a few support calls I think!?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1304651

Title:
  Heartbleed Bug

Status in “openssl” package in Ubuntu:
  Fix Released

Bug description:
  CVE-2014-0160

  http://heartbleed.com/

  Current version of openssl packaged for Ubuntu is 1.0.1f, need to
  upgrade to 1.0.1g, and need backports for legacy systems. This is a
  pretty serious bug...

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1304651/+subscriptions