> 2 years ago (Dec '12, which isn't even 2 years - but > anyway) It was Dec 31 '11, not '12, that the commit was made--more than 2 years ago. It first app

> 2 years ago (Dec '12, which isn't even 2 years - but > anyway) It was Dec 31 '11, not '12, that the commit was made--more than 2 years ago. It first appeared in the OpenSSL 1.0.1 release; March 14, 2012. I don't know what's up with the timestamp on the Ubuntu announcement, but 12.04 was released in April 2012. However, that's before the OpenSSL 1.0.1 date; the Ubuntu 12.04.4 update for openssl 1.0.1-2ubuntu1 came on March 22, 2012. No matter how you slice it, that's more than 2 years. Edit: Ubuntu 12.04 was April 2012, but the 12.04.4 point-release was released at the later date; that's where the 2014 date came from. 12.04 included OpenSSL 1.0.1 before that.