tag:blogger.com,1999:blog-2859419017082777476.post5876293981168425063..comments2023-09-11T04:46:15.992-04:00Comments on Matthew D Fuller - Blog: How to Fix OpenSSL Heart Bleed Bug on UbuntuMatt Fullerhttp://www.blogger.com/profile/08695836860792504116noreply@blogger.comBlogger38125tag:blogger.com,1999:blog-2859419017082777476.post-75331726985956993102014-06-08T00:36:27.324-04:002014-06-08T00:36:27.324-04:00Very helpful... Thanks :DVery helpful... Thanks :DErlang Phttps://www.blogger.com/profile/01427022277568692082noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-56795686889390316762014-04-13T10:01:00.995-04:002014-04-13T10:01:00.995-04:00http://www.ubuntu.com/usn/usn-2165-1/http://www.ubuntu.com/usn/usn-2165-1/Anonymoushttps://www.blogger.com/profile/15716919096567362475noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-34320039930300083862014-04-13T09:56:45.259-04:002014-04-13T09:56:45.259-04:00Same for me, I can't get it to update the buil...Same for me, I can't get it to update the build.Anonymoushttps://www.blogger.com/profile/15716919096567362475noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-59660826739423347522014-04-10T14:24:20.033-04:002014-04-10T14:24:20.033-04:00I'd had the same problem and needed to patch s...I'd had the same problem and needed to patch some old 13.04 systems. Posted the builds we did here: http://invalidlogic.com/2014/04/10/openssl-heartbleed-patches-for-ubuntu-13-04/Ken Robertsonhttp://invalidlogic.comnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-44900682041028807192014-04-10T13:20:28.762-04:002014-04-10T13:20:28.762-04:00If you need to test this on your own server, you c...If you need to test this on your own server, you can download the code and run it yourself; <br /><br />http://www.podciborski.co.uk/unix/heart-bleed-exploit-example-code/<br /><br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-88622285420357436802014-04-10T10:28:46.234-04:002014-04-10T10:28:46.234-04:00same for me - something to do with the repos maybe...same for me - something to do with the repos maybe?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-16698316913719092332014-04-10T10:28:00.648-04:002014-04-10T10:28:00.648-04:00When I update my openSSL version on Ubuntu13.04 -...When I update my openSSL version on Ubuntu13.04 --- I can only download OpenSSL 1.0.1c 10 May 2012<br /><br /><br />Tried changing my repos - no joy!<br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-27889917796498754712014-04-10T05:58:23.089-04:002014-04-10T05:58:23.089-04:00same problem how solve thissame problem how solve thisAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-76847608089430658112014-04-10T05:56:36.493-04:002014-04-10T05:56:36.493-04:00After update i am getting
built on: Wed Jan 8 20...After update i am getting <br />built on: Wed Jan 8 20:51:55 UTC 2014<br /> only<br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-23213077349650036732014-04-10T05:15:03.011-04:002014-04-10T05:15:03.011-04:00because yor keys might have been stolen before upd...because yor keys might have been stolen before updating the openssl stuffAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-55317209974917483512014-04-10T04:23:02.359-04:002014-04-10T04:23:02.359-04:00Now there are no leaks..! But why updating ssl cer...Now there are no leaks..! But why updating ssl certificates? Is it necessary or just being safer?Sai Krishnahttps://www.blogger.com/profile/01708170969839085933noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-16331562238615402982014-04-10T03:46:26.844-04:002014-04-10T03:46:26.844-04:00Thanks Matt. I got the answer now . I just did thi...Thanks Matt. I got the answer now . I just did this sudo apt-get install -y libssl1.0.0 openssl. It workedSai Krishnahttps://www.blogger.com/profile/01708170969839085933noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-74582724397970912332014-04-10T00:59:49.698-04:002014-04-10T00:59:49.698-04:00Same problem here.
What is the solution??Same problem here.<br /><br />What is the solution??rolexhttps://www.blogger.com/profile/00649785034412071445noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-6590722324943488432014-04-09T21:34:27.444-04:002014-04-09T21:34:27.444-04:00Thanks, should be fixed now.Thanks, should be fixed now.Matt Fullerhttps://www.blogger.com/profile/08695836860792504116noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-608661427002178092014-04-09T21:33:59.755-04:002014-04-09T21:33:59.755-04:00If you just do sudo apt-get install openssl libssl...If you just do sudo apt-get install openssl libssl1.0.0 it will only update those packages.Matt Fullerhttps://www.blogger.com/profile/08695836860792504116noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-138734510595064972014-04-09T16:26:04.655-04:002014-04-09T16:26:04.655-04:00This comment has been removed by the author.Lundershttps://www.blogger.com/profile/07674555570862517558noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-70494154823561350912014-04-09T16:23:05.767-04:002014-04-09T16:23:05.767-04:00"apt-get install openssl" should install..."apt-get install openssl" should install the latest version.Lee Phillipshttps://www.blogger.com/profile/13971841501807688836noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-59373185415228727512014-04-09T15:14:34.600-04:002014-04-09T15:14:34.600-04:00They're right.. you need to update both the op...They're right.. you need to update both the openssl and the libssl1.0.0 packages or else you're still affected.Anonymoushttps://www.blogger.com/profile/14498553753991522985noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-86793370459246032592014-04-09T14:35:08.318-04:002014-04-09T14:35:08.318-04:00Why does "opensll verison -a" still show...Why does "opensll verison -a" still show the version 1.0.1 14 Mar 2012, while the -b shows updated date of April 7th?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-22622712623961279052014-04-09T13:27:48.834-04:002014-04-09T13:27:48.834-04:00It unfortunately updating whole server that can af...It unfortunately updating whole server that can affect other behavior of the server. Please let me know if you find one solution, even I'm searchingSai Krishnahttps://www.blogger.com/profile/01708170969839085933noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-1381007094926214612014-04-09T13:21:42.578-04:002014-04-09T13:21:42.578-04:00This comment has been removed by the author.Sai Krishnahttps://www.blogger.com/profile/01708170969839085933noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-10745036603249991972014-04-09T13:07:01.500-04:002014-04-09T13:07:01.500-04:00I see what you mean, I don't want to upgrade a...I see what you mean, I don't want to upgrade all packages (php, mysql, etc) to the latest versions, just openssl. How to do this?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-49225302006509122072014-04-09T13:05:26.253-04:002014-04-09T13:05:26.253-04:00you mean?
sudo apt-get install openssl llibssl1.0....you mean?<br />sudo apt-get install openssl llibssl1.0.0Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-35633334902208015142014-04-09T12:25:22.839-04:002014-04-09T12:25:22.839-04:00Oh, this is upgrading all packages on Ubuntu, not ...Oh, this is upgrading all packages on Ubuntu, not only openssl, if you do "apt-get upgrade" you get the same as "apt-get upgrade openssl"Sai Krishnahttps://www.blogger.com/profile/01708170969839085933noreply@blogger.comtag:blogger.com,1999:blog-2859419017082777476.post-41398503128214423542014-04-09T10:58:46.158-04:002014-04-09T10:58:46.158-04:00Followed these steps and rebooted. Didn't wor...Followed these steps and rebooted. Didn't work.. still have build date of Jan 8 2014.Anonymousnoreply@blogger.com