How to upgrade / fix Ubuntu openssl heartbleed bug

If you read the heartbleed.com website – it suggested the Ubuntu is not secure because there are still using openssl 1.0.1f. If your Ubuntu computer is up to date then it is secure. Ubuntu have back ported the changes from openssl 1.0.1g to 1.0.1.f.

i.e. just: apt-get update && apt-get upgrade

5 thoughts to “How to upgrade / fix Ubuntu openssl heartbleed bug”

  1. Hi,
    it worked on ubuntu 12.04LTS but for 13.04 it is giving error as below,

    W: Failed to fetch http://ppa.launchpad.net/george-edison55/openssl-heartbleed-fix/ubuntu/dists/raring/main/binary-amd64/Packages 404 Not Found

    W: Failed to fetch http://ppa.launchpad.net/george-edison55/openssl-heartbleed-fix/ubuntu/dists/raring/main/binary-i386/Packages 404 Not Found

    E: Some index files failed to download. They have been ignored, or old ones used instead.

  2. Hi,
    I’ve upgrated openssl that way and have upgraded freeradius from ppa to 2.2.5ppa1
    OpenSSL 1.0.1g 7 Apr 2014

    Now I get this error when starting freeradius
    Error: libssl version mismatch. Built with: 1000100f Linked: 1000107f

    It’s on Ubuntu 12.04 LTS

    Can someone help me with that issue?

    Thanks in advance!

    regards
    Mike

    1. I would remove the PPA and just remove update Ubuntu. I.e you really don’t need to use the ppa.

      1. I had serval segmentation faults with the freeradius-version from the standard repository and the fix is only available in a ppa-release, thats the reason why using the ppa

Leave a Reply