Re: Can't patch Heartbleed bug?

[Erwan David <erwan@rail.eu.org>]

Le 2014-04-10 14:56, Dr. Jennifer Nussbaum a écrit :
> I'm running Debian Wheezy 7.4 on a server in Amazon's EC2, that i
> installed, recently, from the official Debian AMI. I havent made any
> changes to the package infrastructure.
>
> I'm trying to fix the Heartbleed bug, but my system seems to think
> everything is up to date. 
>
> My /etc/apt/sources.list has:
>
>   deb http://cloudfront.debian.net/debian wheezy main 
>   deb-src http://cloudfront.debian.net/debian wheezy main 
>   deb http://cloudfront.debian.net/debian wheezy-updates main 
>   deb-src http://cloudfront.debian.net/debian wheezy-updates main
>
>
> I run "sudo apt-get update", and things get pulled down.
>
>
> But when I run "sudo apt-get upgrade", I get:
>
>   $ sudo apt-get upgrade 
>   Reading package lists... Done 
>   Building dependency tree 
>   Reading state information... Done 
>   0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
>
>
> My openssl is not up-to-date:
>
>   $ openssl version -a 
>   OpenSSL 1.0.1e 11 Feb 2013 
>   built on: Sat Feb  1 22:14:33 UTC 2014 
>   platform: debian-amd64
>
>   [...]
>
> I've waited a day in case theres some issue with the m irrors not
> getting updated, but this still happens. Whats the right way to make
> my system safe? All the instructions Ive seen say "apt-get update &&
> apt-get upgrade" will do it, but not in my case!
>
> Thanks!
>
> Jen




Add the security repositories to your mirror lists ?

deb http://security.debian.org/ stable/updates main contrib non-free
deb-src http://security.debian.org/ stable/updates main contrib non-free


--
Erwan