This is because newer versions of software only go into the Ubuntu development release. Security patches and serious bug fixes go into released versions:
https://wiki.ubuntu.com/StableReleaseUpdates#Why The package is also kept in sync with Debian: http://packages.qa.debian.org/o/openssl.html and openssl 0.9.8k is in Lucid: openssl | 0.9.8k-7ubuntu6 | lucid | source, amd64, i386 ** Changed in: openssl (Ubuntu) Status: New => Incomplete -- OpenSSL Version https://bugs.launchpad.net/bugs/521977 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs