SHA-1 fingerprint not matching for OS X bash Update 1.0 – OS X Mavericks

1) I never received this update automatically via Software Update, is this a bug or a feature? (I have verified that the current version on my Mac is the old one, so it has never been updated, indeed)

2) After downloading manually from this page OS X bash Update 1.0 – OS X Mavericks and following the instructions for verifying the fingerprint referred to on that same page, I find that the downloaded installation package does not have the fingerprint it is supposed to have. How come??