>> >> Package: openssl >> >> Version: 1.0.2l-1~bpo8+1 >> >> Severity: important >> >> Tags: patch >> > >> > backports? >> > >> >> Yes, old-stable backports. > > I see this in the version. You are two versions behind and there were a > few CVEs released. I couldn't upload earlier, I would need to check if > it changed but I did not receive a message that it did.
>From https://packages.debian.org/jessie-backports/openssl it seems that the listed version is the latest available version on backports. I just redownloaded the source package, and `EVP_PKEY_asn1_set_item` is definitely still missing from openssl.ld. > If I am not mistaken the versioning is still in place but differently / > with upstream support. So it should remain working. > Can we consider this issue closed? It might not affect stable, but it still affects oldstable-backports.
