I am reading the OpenSSL cookbook, and here what I see there
openssl version OpenSSL 1.0.1 14 Mar 2012
And this my the version of mu Ubuntu 14.04 server
openssl version OpenSSL 0.9.8w 23 Apr 2012
Isn't March earlier then April?
Here is what I have found on heart bleed website:
What versions of the OpenSSL are affected?
Status of different versions:
OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable
Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.