Only OpenSSL 1.0.1f or later has the fix for the heartbleed exploit. So does Ubuntu 12.04LTS have the fix? We need to use 12.04LTS for reasons I won't go into, and we can't upgrade.
According to this page, it uses OpenSSL "1.0.1" (with no letter at the end of the version number): http://packages.ubuntu.com/precise/libssl-dev
It has this file link on the right hand side... [openssl_1.0.1.orig.tar.gz]
Can that .orig file tell us anything?
Does anyone know if there was actually a "1.0.1" release of OpenSSL, or if someone just chopped off the letter?