Re: Can't patch Heartbleed bug?
> On Thursday, April 10, 2014 9:30 AM, David Glover <me@davidglover.org> wrote:
> > Debian patched the wheezy version of OpenSSL without changing the version
> number.
>
> Run:
> dpkg-query -l openssl
>
> You should see version 1.0.1e-2+deb7u5.
>
> The "+deb7u5" indicates the heartbleed patch is installed.
No, i didnt have that originally, only after i added security to my sources.list. The original update didnt update this, so it wasnt just the version-number.
I also checked the site using the http://filippo.io/Heartbleed test, and it came up vulnerable. But things are fixed now.
Reply to: