>If you're concerned about the Slapper worm, upgrade your Apache+SSL only. >For other security updates, if you didn't compile the software yourself, >use the RH up2date feature. It should have all the pertinent security fixes >available there.
RedHat has OpenSSL packages that resolve the slapper issue available for all recent releases, and have had since July 29th, before I ever heard of slapper. http://www.redhat.com/support/alerts/linux_slapper_worm.html