Patched OpenSSL for the Heartbleed Bug

Shenal Silva shenal.silva007 at gmail.com
Wed Apr 9 18:18:31 UTC 2014


Thanx Phil for your prompt reply .
So long story short security update for Trusty Tahr (14.04) Beta users
won't be available anytime soon is it ??

Regards,
*Shenal Silva,*
Mobile:+94718670210
          +94786903735
Skype:shenal777


On 9 April 2014 20:53, Phil Wyett <aura.yoda at gmail.com> wrote:

> On Wed, 2014-04-09 at 20:32 +0530, Shenal Silva wrote:
> > Hi All,
> > As most of you'll know A serious vulnerability called the "Hearbleed"
> > bug has been discovered and the vulnerable version (OpenSSL 1.0.1f 6
> > Jan 2014) is the version still in the repositories. Can someone look
> > into updating the repositories with the patched version (1.0.0g) it
> > would be really good
> > Regards,
> > Regards,
> > Shenal Silva,
> > Mobile:+94718670210
> >           +94786903735
> > Skype:shenal777
>
> Updates for supported releases: http://www.ubuntu.com/usn/usn-2165-1/
>
> Trusty aka what will be 14.04:
>
> openssl (1.0.1f-1ubuntu2) trusty; urgency=medium
>
>   * SECURITY UPDATE: side-channel attack on Montgomery ladder
> implementation
>     - debian/patches/CVE-2014-0076.patch: add and use constant time swap
> in
>       crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c,
>       util/libeay.num.
>     - CVE-2014-0076
>   * SECURITY UPDATE: memory disclosure in TLS heartbeat extension
>     - debian/patches/CVE-2014-0160.patch: use correct lengths in
>       ssl/d1_both.c, ssl/t1_lib.c.
>     - CVE-2014-0160
>
> Date: Mon, 07 Apr 2014 15:37:53 -0400
> Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
>
> Regards
>
> Phil
>
> --
>
> Phil Wyett
> {
>     GNU Linux User and Developer
>     Leigh GNU Linux User Group (http://leigh.lug.org.uk)
>     IRC: philwyett
>     Twitter: philwyett and leigh_lug
> }
>
> --
> Ubuntu-GNOME mailing list
> Ubuntu-GNOME at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-gnome
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-gnome/attachments/20140409/b0cd7e76/attachment.html>


More information about the Ubuntu-GNOME mailing list