r/debian•
zwarag

How to update for the Heartbleed fix

Hello

i found out that one of my servers uses OpenSSL 1.0.1e on Debian 7.4.

I tried to "apt-get update && apt-get upgrade" but there is no sign of any libssl nor openssl update. Do i have to get the source and compile it by myself?

EDIT: here is my apt/source.list AND apt-cache policy openssl

$ cat /etc/apt/sources.list #

#deb cdrom:[Debian GNU/Linux 6.0.1a _wheezy_ - Official amd64 NETINST Binary-1 20110320-15:00]/ squeeze main
#deb cdrom:[Debian GNU/Linux 6.0.1a _wheezy_ - Official amd64 NETINST Binary-1 20110320-15:00]/ squeeze main

deb http://ftp.de.debian.org/debian/ wheezy main
deb-src http://ftp.de.debian.org/debian/ wheezy main
**deb http://security.debian.org/ wheezy/updates main**
deb-src http://security.debian.org/ wheezy/updates main

# wheezy-updates, previously known as 'volatile'
deb http://ftp.de.debian.org/debian/ wheezy-updates main
deb-src http://ftp.de.debian.org/debian/ wheezy-updates main

#deb http://ftp.de.debian.org/debian/ wheezy main contrib non-free
#deb-src http://ftp.de.debian.org/debian/ wheezy main contrib non-free

#deb http://security.debian.org/ wheezy/updates main contrib non-free
#deb-src http://security.debian.org/ wheezy/updates main contrib non-free

#deb http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free
#deb-src http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free

apt-cache policy openssl:

openssl:

Installed: 1.0.1e-2+deb7u4
Candidate: 1.0.1e-2+deb7u4
Version table:
*** 1.0.1e-2+deb7u4 0
    500 http://ftp.at.debian.org/debian/ wheezy/main amd64 Packages
    100 /var/lib/dpkg/status

EDIT - HERE IS THE FIX

I added this repo and everything works as it should now:

deb http://security.debian.org/debian-security wheezy/updates main

Posted Apr 9, 2014, 7:39 AM UTC · edited

2518
Loading comments…