Comment by reaperhulk | Hacker News Reader

Top New Best Ask Show Jobs

Comment by reaperhulk | Hacker News Reader

Debian advisory: https://lists.debian.org/debian-security-announce/2014/msg00...

Red Hat 6 advisory: https://rhn.redhat.com/errata/RHSA-2014-0625.html

Red Hat 5 advisory: https://rhn.redhat.com/errata/RHSA-2014-0624.html

Ubuntu advisory: https://lists.ubuntu.com/archives/ubuntu-security-announce/2...

And FreeBSD

http://www.freebsd.org/security/advisories/FreeBSD-SA-14:14....

Anybody know what the difference is between Ubuntu package

openssl 1.0.1e-3ubuntu1.2 and openssl 1.0.1e-3ubuntu1.4

1.0.1e-3ubuntu1.2 is older and doesn't have the fix for this CVE.

This page [1] links to the package's changelog [2], which should answer your question.

[1]: http://packages.ubuntu.com/saucy/openssl

[2]: http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl/...

Reply on news.ycombinator.com