[Bug 1307532] Re: OpenSSL is not up-to-date in Ubuntu 13.10

Tue Apr 15 06:44:45 UTC 2014

Someone has updated openssl with sources dated 11th of feb, weeks before the Heartbleed issue was made public.
The last official sources were updated on the 7th of April (not the built date, the sources date).

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1307532

Title:
  OpenSSL is not up-to-date in Ubuntu 13.10

Status in “openssl” package in Ubuntu:
  Invalid

Bug description:
  I have noticed that OpenSSL and libssl have been updated to release
  1.0.1e. When you take a careful look at the latest release on the
  official site, it's 1.0.1g: http://www.openssl.org/news/

  You might want to check this screenshot on my machine:
  https://docs.google.com/document/d/1UaYD0IhZdpeZydJ8MA1h5nOjTBbFLlW8VSI3LSoKTY4/edit?usp=sharing

  The OpenSSL version is 1.0.1e when the latest official sources are
  1.0.1g!

  Build date and version are 2 very different things!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1307532/+subscriptions