Why Fedora 10 still uses openssl pkg from 2007, 4 releases old?

[Rick Stevens]

Frantisek Hanzlik wrote:
> After upgrading from F7 to F10 it's unable (for me, but on several sites)
> access to sendmail daemon with authenticated access by either TLS (port 25)
> or SSL (port 465) protocols from M$ Outlook (Express too). I still make
> on right description this issue, its look like some problem in certificate
> exchange.
> But no matter how it's related with, surprising for me is fact,
> that Fedora 10 uses openssl package version 0.9.8g released in 2007,
> while actual released version is 0.9.8j, four versions newer.

If you check the source RPM's spec file, you'll see that most (if not
all) of the "j" patches have been backported to the "g" version.  The
trick is that the "j" version bumps the .so for /lib[64]/libcrypto.so.7
and /lib[64]/libssl.so.7 from ".7" to ".8" and a lot of existing code
would break because they want .7.  Hope that explains it for you.

----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      ricks at nerd.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
- If you're not part of the solution, you're part of the precipitate -
----------------------------------------------------------------------