Yes, the OpenSSL version may have changed.
Should I require everyone to change their password, so that it will update the 'salt'? I don't know how it stores the salt, maybe as part of the encrypted string, but I don't know enough about it.
Now what about data I cannot access at all, because of the salt problem? Is it just lost without hope?