openssl_june.md

Vunerlability: https://www.openssl.org/news/secadv_20140605.txt

Patch for Ubuntu: https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu4

Report from Ubuntu: https://lists.ubuntu.com/archives/ubuntu-security-announce/2014-June/002532.html

Some helpful comments: https://news.ycombinator.com/item?id=7851357

OpenSSL branch release notes: https://www.openssl.org/news/openssl-1.0.1-notes.html

Determine which build openssl is using:

$ openssl version -a

How to verify you have a patched version: http://askubuntu.com/questions/478042/how-to-patch-the-vulnerability-cve-2014-0224-in-openssl

root@rails-app2:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 12.04.4 LTS
Release:    12.04
Codename:   precise
root@rails-app2:~# apt-cache policy openssl
openssl:
  Installed: 1.0.1-4ubuntu5.14
  Candidate: 1.0.1-4ubuntu5.14
  Version table:
 *** 1.0.1-4ubuntu5.14 0
        500 http://us-east-1.ec2.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
        500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://archive.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
        100 /var/lib/dpkg/status
     1.0.1-4ubuntu3 0
        500 http://us-east-1.ec2.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        500 http://archive.ubuntu.com/ubuntu/ precise/main amd64 Packages