Bug 994061: pin openssl past heartbleed on Ubuntu; r=Callek