OpenSSL 3.5.7 and Almalinux 9.8

Security
1

Has anybody a clue how long it will take til openssl 3.5.7 will be released to RHEL ?

Last time it took 4 month for 3.5.5.

Reason why i ask is that one solved bug can easily be used from remote.

2

CentOS Stream 9 does already have openssl-3.5.7-2.el9 so RHEL 9.9 could get more or less that. In November.

A rebase patch between point updates is much less likely than a backport of feature.

3

I reported it to the security channel.

1 Like
4

I have also filed a Red Hat Jira ticket: