How to upgrade OpenSSL on Ubuntu Server 12.04 LTS? (Heartbleed) [duplicate]
How do I upgrade OpenSSL using Ubuntu's repository?
I see the USN at http://www.ubuntu.com/usn/usn-2165-1/
and the package here https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.12
but I can't find instructions on how to use that to upgrade my OpenSSL version.
The standard update commands don't upgrade my version of ssl:
sudo apt-get update
sudo apt-get dist-upgrade
openssl
OpenSSL> version
OpenSSL 1.0.1 14 Mar 2012
How do I get the latest version from the repository?
Edit:
dpkg --list openssl
||/ Name Version Description
+++-=========================-=========================-==================================================================
ii openssl 1.0.1-4ubuntu5.12 Secure Socket Layer (SSL) binary and related cryptographic tools
aptitude show libssl1.0.0
Package: libssl1.0.0
State: installed
Automatically installed: no
Multi-Arch: same
Version: 1.0.1-4ubuntu5.12
Priority: required
Section: libs
Maintainer: Ubuntu Developers <[email protected]>
Architecture: amd64
Uncompressed Size: 2,991 k
Depends: libc6 (>= 2.14), zlib1g (>= 1:1.1.4), debconf (>= 0.5) | debconf-2.0
PreDepends: multiarch-support
Breaks: openssh-client (< 1:5.9p1-4), openssh-client (< 1:5.9p1-4), openssh-server (< 1:5.9p1-4), openssh-server (< 1:5.9p1-4),
libssl1.0.0 (!= 1.0.1-4ubuntu5.12)
Replaces: libssl1.0.0 (< 1.0.1-4ubuntu5.12)
Description: SSL shared libraries
libssl and libcrypto shared libraries needed by programs like apache-ssl, telnet-ssl and openssh.
It is part of the OpenSSL implementation of SSL.
Can you do aptitude show libssl1.0.0? You probably have the right patched version if you did apt-get dist-upgrade and rebooted, but it doesn't show up in openssh version, because ubuntu packages programs differently. Edit: typo