[Bug 1310437] [NEW] Ubuntu 14.04 openssl version mismatch

[danny]

Public bug reported:

Type this:

sudo openssl version

Get this:

OpenSSL 1.0.1f 6 Jan 2014


Type this:

sudo apt-cache policy openssl

Get this:

openssl:
  Installed: 1.0.1f-1ubuntu2
  Candidate: 1.0.1f-1ubuntu2
  Version table:
 *** 1.0.1f-1ubuntu2 0
        500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status 


http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl/openssl_1.0
.1f-1ubuntu2/changelog

Based on change log, the file: 1.0.1f-1ubuntu2 is correct; but, the date
from OpenSSL is not!


When I did this exact same thing from the BETA 2 Ubuntu 14.04 (just a few days ago), I got the correct date of April 7, 2014.

Based on this, I can't be 100% sure that the version we have is correct.

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: possible security vulnerability

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1310437

Title:
  Ubuntu 14.04 openssl version mismatch

Status in “openssl” package in Ubuntu:
  New

Bug description:
  Type this:

  sudo openssl version

  Get this:

  OpenSSL 1.0.1f 6 Jan 2014


  
  Type this:

  sudo apt-cache policy openssl

  Get this:

  openssl:
    Installed: 1.0.1f-1ubuntu2
    Candidate: 1.0.1f-1ubuntu2
    Version table:
   *** 1.0.1f-1ubuntu2 0
          500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
          100 /var/lib/dpkg/status 


  http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl/openssl_1.0
  .1f-1ubuntu2/changelog

  Based on change log, the file: 1.0.1f-1ubuntu2 is correct; but, the
  date from OpenSSL is not!

  
  When I did this exact same thing from the BETA 2 Ubuntu 14.04 (just a few days ago), I got the correct date of April 7, 2014.

  Based on this, I can't be 100% sure that the version we have is
  correct.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1310437/+subscriptions