OpenSSL 1.1.1* upgrade (Security)

[Neustradamus]

Can you upgrade OpenSSL to 1.1.1 branch?

The current branch is EOL since 2019-12-31.

https://www.openssl.org/

[dnutan (Marc)]

I’d say no. That comes from upstream (CentOS / Red Hat) which keep what they consider stable versions (even if older), applying security patches to the packages.
Newer version available on CentOS 8.

Better explained:

Using 3rd Parties to keep up with package evolution?

CentOS keeps the same major/minor versions of (at least) any significant packages through a release’s life cycle, which does result in some pretty old versions of software. They do backport security fixes for those packages, though, so you aren’t left with vulnerable software. And for packages where you might really want a newer version (like PHP or MariaDB), Software Collections let you install newer versions alongside the default packages. I’d be concerned that using third-party repos for c…

[Neustradamus]

@dnutan: You can see evolution for old Samba!

• https://github.com/NethServer/dev/issues/6119

• GnuTLS 3.6.x upgrade (Security)

A better NethServer is on the road, do not stop it!

[pike (Michael Kicks)]

I should look for an hammer with “Upstream” engraved on. Ad smash it on every Neustradamus update request.

Why you don’t want to get along?