I didn't see this answered anywhere. Did the Ubuntu single sign on ever vulnerable to hreatbleed, also known as CVE-2014-0160? If so, has it been patched? Should we change our passwords?

If not, it may be a good idea to post the information somewhere in the Ubuntu login site.

Thanks