openssl-1.0.1g acts as the permanent upgrade for ANY version of openssl

[roarde]

because it's in patches/

Gslapt will use it every time. To replace "k", for example.

Do we really know how this works?

[Rodrigo Bistolfi]

Yes, patches has a higher priority. Priorities are set in slapt-get.conf. Every openssl package should go directly to patches probably.

[roarde]

There does need to be a published policy on how we use repo priorities.

But there will be no full release which uses "g". Any ISO rolled now will pick up a later version of OpenSSL anyway.

As part of repo cleanup, put removing OpenSSL 1.0.1g from patches/ at the top of the list.

[Former user]

openssl should be upgraded from 1.0.1k - 1.0.1m. im having issues with the patches when i try

[Moises Henriquez]

This was due to the package being in patches. The repos have been fixed for the 7.1 FINAL release