This link talks about the new patches to be released by OpenSSL Foundation very soon.
In a mailing list note published last night, Matt Caswell of the OpenSSL Project Team announced that OpenSSL versions 1.0.2a, 1.0.1m, 1.0.0r, and 0.9.8zf will be released Thursday.
Does it mean that all the
0.9.8 versions has to be updated? Our openssl version is 1.0.1. Should I wait for 1.0.1m to be released and apply the patch?
[root@merc07 ~]# openssl version OpenSSL 1.0.1e-fips 11 Feb 2013 [root@merc07 ~]#