[Bug 1307532] Re: OpenSSL is not up-to-date in Ubuntu 13.10

[Marc Deslauriers]

-a is only the date at which the original version came out, that isn't
the date that matters for Ubuntu since, like most distros, we backport
security fixes.

-b will show you when the package was built, and that is what is
important.

You probably shouldn't attempt to maintain your own openssl, it will be
much easier to stay up-to-date with security fixes if you use the one
packaged.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1307532

Title:
  OpenSSL is not up-to-date in Ubuntu 13.10

Status in “openssl” package in Ubuntu:
  Invalid

Bug description:
  I have noticed that OpenSSL and libssl have been updated to release
  1.0.1e. When you take a careful look at the latest release on the
  official site, it's 1.0.1g: http://www.openssl.org/news/

  You might want to check this screenshot on my machine:
  https://docs.google.com/document/d/1UaYD0IhZdpeZydJ8MA1h5nOjTBbFLlW8VSI3LSoKTY4/edit?usp=sharing

  The OpenSSL version is 1.0.1e when the latest official sources are
  1.0.1g!

  Build date and version are 2 very different things!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1307532/+subscriptions