The recently announced Heartbleed bug in OpenSSL affects many sites (70% of the internet).
There's a website:
There's a web-based test:
What should I do to protect the sites that I run?
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.Sign up to join this community
Update your system:
sudo apt-get update sudo apt-get upgrade
Reboot the server
openssl version -a to make sure you have the latest version!!
More specifically for Ubuntu or Debian in general
/etc/init.d/apache2 stop aptitude update dpkg -l \*libssl\* aptitude safe-upgrade libssl1.0.0 dpkg -l \*libssl\* /etc/init.d/apache2 start