On Sun, Apr 20, 2014 at 5:39 AM, Steve Litt <sl...@troubleshooters.com> wrote:
> Hi all,
>
> I installed Wheezy on my backup server, then did this:
>
> apt-get update
> apt-get upgrade
>
> root@bupserv:/backupserver/stevebup# openssl version
> OpenSSL 1.0.1e 11 Feb 2013
> root@bupserv:/backupserver/stevebup#

Wheezy is the current stable so they aren't going to update an
important library to a new upstream version. Instead they backport
security patches to the current version. Check your package version.

dpkg -l openssl

According to the changelog [1], wheezy openssl got the heartbleed
patch on 1.0.1e-2+deb7u5 on April 7. The latest version as of this
email is 1.0.1e-2+deb7u7.

[1] 
http://metadata.ftp-master.debian.org/changelogs//main/o/openssl/openssl_1.0.1e-2+deb7u7_changelog

Cheers,

Jimmy


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/can0j2y6pwuu4nrgcvu6be7p+1xmuqmhs+jdcamwwkjhb+px...@mail.gmail.com

Reply via email to