Raise PackagingError in more cases of invalid version numbers.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
Vulnerable versions of OpenSSL aren't necessarily vulnerable to Heartbleed, if they are before 1.0.1.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>