Lukas Ruf wrote:
Dear all, after I have installed the latest libssl, do I need to re-compile anything that makes use of libssl? Concrete examples for me are: - OpenSSH - Mod_SSL The reason I am asking for, on my server I have OpenSSH and Apache "hand-tailored" to fit our needs. However, for compile-options, I make use of the ones submitted with each as default. Thanks for any enlightenment.
I believe that the answer is yes, you will need to recompile using the updated source packages, but I don't know the debian policy or reference that states this. It seems that the same would go for using a back-ported package. You'd have to watch for the security announcement and then keep watching for an update from the back-port source.
-- Jacob