May I ask why openssl 0.9.7a is used and not the latest, when looking at the rate of when packages are updated in Fedora this is close to the only one beeing held back..why?
Thomas
Thomas:
The version of OpenSSL is patched for the known problems with 0.9.7a. I agree that the current version # should be used when the test cycle is started and then the patch level increased. Also, a changelog would help greatly when determining if a CVE is addressed.
-- James McKenzie