rpm/up2date question

[William Hooper]

Kevin M. Shortt said:
> For instance, I use openssl. Well www.openssl.org has 0.9.7d available
> and is the recommended stable and secure release of openssl.
[snip]
> Can anyone remark or comment to help me either correct my ignorance
> or share with me what you do to combat needing to maintain both
> ways of administrating your machines?

Version numbers are not a reliable way to determine security.

http://www.redhat.com/advice/speaks_backport.html

-- 
William Hooper