![](https://seccdn.libravatar.org/avatar/07e594a050af805152b550eeb6b8f844.jpg?s=120&d=mm&r=g)
On Thu, Jan 16, 2003 at 10:59:50AM -0400, James Oakley wrote:
So, effectively, the openssl RPM on the update site should install a version more recent than 0.9.6c, even though it still bears the release number 0.9.6c?
No, it's 0.9.6c with the security bugs fixed.
Understood.
Also, I am reasonably confident the OpenSSL project members take into account the need to support obsoleted API features from release to release, particulalry along the same development branch.
There are a couple of things changed between 0.9.6c and e that affected a number of people who were installing from source, particularly on Red Hat.
I highly recommend subscribing to either suse-security or suse-security-announce. You'll get all of the informative security announcements. You'll see that SuSE's security team is the best of the major distros and your mind will be at peace.
Already done. And thanks for your reassurances! Now I know about the way it works, I do feel somewhat happier about it all. Thanks to all who have replied. Dan