Eric Haszlakiewicz wrote on 04/07/2015 05:24 AM: > perhaps you downloaded a tarball that was created from sources checked out > that way.
yes, that must be what happened... i think i downloaded tarballs to fix the last OpenSSL vulnerability, in Advisory 2014-015
