Does FC4 have the same OpenSSL rpm installed that FC3 had? The same one that matches the High Risk issue that RedHat posted an alert for in RedHat 9??? Where the attacker or "crackerjack kiddie" can get your passwd's, credit card numbers and other sensitive information from your Fedora Core o/s?!

Check out this OLD/NEW HIGH RISK securty problem with RedHat products: http://www.linuxsecurity.com/content/view/105849/110/

Then go to this link and look for the OpenSSL rpm: ftp://download.fedora.redhat.com/pub...ore/updates/3/
It's 0.9.6b, not 0.9.7b or above isn't it?!

I don't have FC4 you see, so if someone that does have it can kindly look at install.log which resides in the /root directory, they can see what packages are installed and what are available.


(I just want to know if RH is on drugs or not or if they have awoken from their 'trip' to fix a major security flaw before they release FC4, 5, 6....)

The version in FC4 and RHEL 4 is openssl-0.9.7e.