$: dpkg -l | grep ssl | grep amd64 | awk '{print $3}'
1.0.1e-2+deb7u3
1.0.1e-2+deb7u3
1.0.1e-2+deb7u3

#!/bin/sh
heartbleed_is_fixed() {
    #
    # For each package that uses SSL
    for version in $(dpkg -l | grep ssl | grep amd64 | awk '{print $3}'); do
        #
        # The heartbleed bug was fixed in OpenSSL 1.0.1e2+deb7u6
        # Check each package and if package version is less
        if [[ "$version" < "1.0.1e-2+deb7u6" ]]; then
            #
            # return false, heartbleed is not fixed
            return 1
        fi
    done
    #
    # If we got to this point then the heartbleed bug has been fixed
    return 0
}

"$version" < "1.0.1e-2+deb7u6"

if [ "$version" < "1.0.1e-2+deb7u6" ]; then