The core affected package is
libssl1.0.0, which if you can, just replace with the patched version, restart everything. You can try to download a binary, and manually install an arm-hf, using
dpkg with the version
1.0.1e-2+deb7u5 for wheezy.
You can also use the
jessie repository, just for this single one time update, which should get you version
After install and reboot you it is strongly recommended to revoke all keys and certificates and regenerate everything from scratch, using new passwords and vectors.
As of 09/04/2014 the main wheezy repository uses the patched version
1.0.1e-2+deb7u5 and as commented, you can get it like this:
> sudo apt-get update
> sudo apt-get upgrade
Which will update the following packages:
libssl1.0.0 openssh-client openssh-server openssl ssh
*Here is how to selectively upgrade certain packages using jessie repository, without completely breaking wheezy, and will install the latest
Add the following two lines into
deb http://mirrordirector.raspbian.org/raspbian/ jessie main contrib non-free rpi
deb http://archive.raspbian.org/raspbian jessie main contrib non-free rpi
You then edit the file
/etc/apt/preferences (create the file if doesn't exist) to tell apt in which repositories it should look to do an update. We put jessie on a low priorty so that when you use apt-get update it will ignore
jessie and use
wheezy repo instead. This is important for the step after this one.
Pin: release n=wheezy
Pin: release n=jessie
Pin: release o=Raspbian
Now, at your free will you can tell apt to use
apt-get -t jessie install openssl libssl1.0.0 openssh-client openssh-server ssh
*An extract from Chapter 6, Raspberry Pi Server Essentials.