Once more, the fixes included in openssl-0.9.7c have backported into openssl-0.9.7a-33.21 by Red Hat, please read the speaks_backport link again.
If you really want something outside of the support Red Hat supplies then you are are on your own. It is a good idea to keep package updates as rpm packages, since you have the desire to use openssl-0.9.8 get source rpm file for the package and build the binaries.
|