Public bug reported:

Type this:

sudo openssl version

Get this:

OpenSSL 1.0.1f 6 Jan 2014


Type this:

sudo apt-cache policy openssl

Get this:

openssl:
  Installed: 1.0.1f-1ubuntu2
  Candidate: 1.0.1f-1ubuntu2
  Version table:
 *** 1.0.1f-1ubuntu2 0
        500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status 


http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl/openssl_1.0
.1f-1ubuntu2/changelog

Based on change log, the file: 1.0.1f-1ubuntu2 is correct; but, the date
from OpenSSL is not!


When I did this exact same thing from the BETA 2 Ubuntu 14.04 (just a few days 
ago), I got the correct date of April 7, 2014.

Based on this, I can't be 100% sure that the version we have is correct.

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: possible security vulnerability

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1310437

Title:
  Ubuntu 14.04 openssl version mismatch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1310437/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to