So the 1.0.2zg release is only for those paying $50,000 for the enterprise contract? That's understandable, but guess the people paying for lower tiers won't be very happy with that.
To be fair, this is clearly stated on their page.
To be fair, this is clearly stated on their page.
edit: ubuntu 18.04 (still under LTS, no Pro needed as this is main repo) uses 1.0.2, so the fix should ideally show up here: https://packages.ubuntu.com/source/bionic/openssl1.0.
changelog: http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl1...
----
[1] we provide SASS services to companies regulated industries, like investment banks, they have a high level of monitoring required which includes auditing the security of suppliers like us
[2] possibly more so than the latest upstream version
[3] or even not needed at all because the bug was introduced in a feature that wasn't back-ported