kafka99

I was indeed right :( The danger of only backporting security fixes. But it's in the patch now:

http://www.ubuntu.com/usn/usn-2959-1/

Looks like the "negative zeroes" patch (commit in https://mta.openssl.org/pipermail/openssl-commits/2015-April...) was never introduced in debian and ubuntu?