Am Fr, den 17.06.2005 schrieb Peter Loron um 1:56:
I'm running a CentOS 3.4 box. According to yum, the OpenSSL 0.9.7a-33.15 package I have installed is the latest available. A check of the OpenSSL website shows 0.9.7g source being the latest.
Is the CentOS 0.9.7a package patched to cover the same isues that the generic 0.9.7 source covers?
-Pete
The "33.15" indicates the patchlevel of the OpenSSL package. Yes, Red Hat backports [1] fixes for issues. You can check the rpm --changelog for CAN numbers and comments. With other words, you don't need to get the upstream version to be on the safe side.
[1] http://www.redhat.com/advice/speaks_backport.html
Alexander