I am running LMDE as a workstation and I am afraid as of now (
Wed Apr 9 11:28:14 UTC 2014) no patch has been released yet. All available patches have been applied by me and right now
# openssl version -a shows
OpenSSL 1.0.1e 11 Feb 2013.
You might want to consider changing your sources to point to Debian repos directly in order to get the update. I'll be doing this soon.
Just as a side note, LMDE is a desktop- rather than server-targeted distro. If you wish to be secure you should rather stick to Debian stable.
If you wish to update the package please follow the steps:
- Edit your
/etc/apt/sources.list file, comment out whatever you have there and add the following line:
deb http://ftp.us.debian.org/debian testing main contrib non-free (Note: you might just as well do this with apt-pinning but this way it's easier to go back to LMDE repos right after the update)
aptitude install openssl libssl1.0.0 to update the packages
aptitude show openssl to verify you have
1.0.1g-1 version (see here for explanation of version number)
- Edit your
/etc/apt/sources.list again, uncomment what you previously had there and comment out the
deb http://ftp.us.debian.org/debian testing main contrib non-free line.
aptitude update and you're good to go :)