How to update for the Heartbleed fix
Hello
i found out that one of my servers uses OpenSSL 1.0.1e on Debian 7.4.
I tried to "apt-get update && apt-get upgrade" but there is no sign of any libssl nor openssl update. Do i have to get the source and compile it by myself?
EDIT: here is my apt/source.list AND apt-cache policy openssl
$ cat /etc/apt/sources.list #
#deb cdrom:[Debian GNU/Linux 6.0.1a _wheezy_ - Official amd64 NETINST Binary-1 20110320-15:00]/ squeeze main
#deb cdrom:[Debian GNU/Linux 6.0.1a _wheezy_ - Official amd64 NETINST Binary-1 20110320-15:00]/ squeeze main
deb http://ftp.de.debian.org/debian/ wheezy main
deb-src http://ftp.de.debian.org/debian/ wheezy main
**deb http://security.debian.org/ wheezy/updates main**
deb-src http://security.debian.org/ wheezy/updates main
# wheezy-updates, previously known as 'volatile'
deb http://ftp.de.debian.org/debian/ wheezy-updates main
deb-src http://ftp.de.debian.org/debian/ wheezy-updates main
#deb http://ftp.de.debian.org/debian/ wheezy main contrib non-free
#deb-src http://ftp.de.debian.org/debian/ wheezy main contrib non-free
#deb http://security.debian.org/ wheezy/updates main contrib non-free
#deb-src http://security.debian.org/ wheezy/updates main contrib non-free
#deb http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free
#deb-src http://ftp.de.debian.org/debian/ wheezy-updates main contrib non-free
apt-cache policy openssl:
openssl:
Installed: 1.0.1e-2+deb7u4
Candidate: 1.0.1e-2+deb7u4
Version table:
*** 1.0.1e-2+deb7u4 0
500 http://ftp.at.debian.org/debian/ wheezy/main amd64 Packages
100 /var/lib/dpkg/status
EDIT - HERE IS THE FIX
I added this repo and everything works as it should now:
deb http://security.debian.org/debian-security wheezy/updates main
Posted Apr 9, 2014, 7:39 AM UTC · edited
2518