Skip to main content

How to update Ubuntu to plug the Heartbleed OpenSSL flaw

how to update ubuntu plug heartbleed openssl flaw
Image used with permission by copyright holder

The Heartbleed OpenSSL bug is unlike virtually any Internet security threat you’ve probably ever heard of. It’s not a virus that’s specific to one operating system or type of device. Since it revolves around a flaw in the method of encryption used by many of the world’s websites, it affects almost everyone who uses the Internet, including people who operate servers that run Ubuntu Linux, the free, open-source operating system.

MORE: Which websites are affected by the Heartbleed OpenSSL encryption bug?

Fortunately, with the help of a few commands, you can check whether the version of Ubuntu you’re using is vulnerable to the Heartbleed bug, and also update Ubuntu to ensure that the vulnerability is sealed and patched. It’s important to note that multiple versions of Ubuntu are affected, including Ubuntu 12.04 LTS, Ubuntu 12.10, and Ubuntu 13.10, so it’s imperative that you ensure that the version you run is safe — or update to one that is. Here’s how, according to ansoncheunghk.info.

  1. First, run this command: # sudo openssl version -a. What’s important here is the line that starts with “built on,” which gives you a date for the version of Ubuntu you’re running on your server. If you’re using a version dated before April 7, it is vulnerable to the Heartbleed bug. If it’s dated on or after April 7, you’re in the clear. Here’s what to do if you aren’t, like the the version pictured below, which is dated June 4, 2013.
ubuntu command 1
Image used with permission by copyright holder

           2. Run this command: # sudo apt-get dist-upgrade. This will patch your version of Ubuntu with the latest security update.

ubuntu command 2
Image used with permission by copyright holder

              3. Then restart your Ubuntu server using this command: # sudo reboot. Once reboot is complete, use the same command you used in Step 1 to verify that your Ubuntu install is dated for April 7 or later by checking the line that begins with “built on.”

ubuntu command 3
Image used with permission by copyright holder

Do you have any other tips for how to make Ubuntu safe from the Heartbleed bug? If so, please share them in the comments below.

MORE: How to check if a website is vulnerable to the Heartbleed bug

Image credit: http://www.themebin.com

Body image credits: http://www.ansoncheunghk.info

Editors' Recommendations

Konrad Krawczyk
Former Digital Trends Contributor
Konrad covers desktops, laptops, tablets, sports tech and subjects in between for Digital Trends. Prior to joining DT, he…
4 CPUs you should buy instead of the Ryzen 7 7800X3D
AMD Ryzen 7 7800X3D sitting on a motherboard.

The Ryzen 7 7800X3D is one of the best gaming processors you can buy, and it's easy to see why. It's easily the fastest gaming CPU on the market, it's reasonably priced, and it's available on a platform that AMD says it will support for several years. But it's not the right chip for everyone.

Although the Ryzen 7 7800X3D ticks all the right boxes, there are several alternatives available. Some are cheaper while still offering great performance, while others are more powerful in applications outside of gaming. The Ryzen 7 7800X3D is a great CPU, but if you want to do a little more shopping, these are the other processors you should consider.
AMD Ryzen 7 5800X3D

Read more
Even the new mid-tier Snapdragon X Plus beats Apple’s M3
A photo of the Snapdragon X Plus CPU in the die

You might have already heard of the Snapdragon X Elite, the upcoming chips from Qualcomm that everyone's excited about. They're not out yet, but Qualcomm is already announcing another configuration to live alongside it: the Snapdragon X Plus.

The Snapdragon X Plus is pretty similar to the flagship Snapdragon X Elite in terms of everyday performance but, as a new chip tier, aims to bring AI capabilities to a wider portfolio of ARM-powered laptops. To be clear, though, this one is a step down from the flagship Snapdragon X Elite, in the same way that an Intel Core Ultra 7 is a step down from Core Ultra 9.

Read more
Gigabyte just confirmed AMD’s Ryzen 9000 CPUs
Pads on the AMD Ryzen 7 7800X3D.

Gigabyte spoiled AMD's surprise a bit by confirming the company's next-gen CPUs. In a press release announcing a new BIOS for X670, B650, and A620 motherboards, Gigabyte not only confirmed that support has been added for next-gen AMD CPUs, but specifically referred to them as "AMD Ryzen 9000 series processors."

We've already seen MSI and Asus add support for next-gen AMD CPUs through BIOS updates, but neither of them called the CPUs Ryzen 9000. They didn't put out a dedicated press release for the updates, either. It should go without saying, but we don't often see a press release for new BIOS versions, suggesting Gigabyte wanted to make a splash with its support.

Read more