You do not have the Heartbleed vulnerability on your server, OpenSSL has been patched to fix this issue (without upgrading it).
You have left out several important lines in the OpenSSL version output, that's how you know it's been patched, not with the version number:
openssl version -a ✭
OpenSSL 1.0.1e 11 Feb 2013
built on: Mon Apr 7 20:33:19 UTC 2014
platform: debian-amd64
options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) blowfish(idx)
compiler: cc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,--noexecstack -Wall -DOPENSSL_NO_TLS1_2_CLIENT -DOPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 -DMD32_REG_T=int -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/usr/lib/ssl"
The 'build on' line is what matters here, Apr. 7 or after: you're good. Otherwise: you're in trouble.
Update, since the build date doesn't seem to be good:
Maybe the unattended upgrade hasn't run yet, on my server the scripts in cron.daily are configured to run at 6:25
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
Also, check the contents of /etc/apt/apt.conf.d/10periodic and check that security updates are installed:
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";
APT::Periodic::Unattended-Upgrade "1";
Source: https://help.ubuntu.com/lts/serverguide/automatic-updates.html
My answer to this question was deleted. I'll try again:
This problem is actually not caused by APT DB being locked but the apt cron job tries to update xapian index. If you want to get rid of this error message just remove the apt-xapian-index package.
Meta: I guess some admin didn't like earlier answer to this problem as it contained link link to my blog with more details on this issue. It would be very useful to have some feedback on the deletion, especially for new users. The link to help center didn't really help. If this gets deleted, I will get the message, and not comment on this issue anymore. Good luck finding the answer ;-D
Best Answer
Try
for this file