OpenSSL updates

[ray]

Hello,

Why hasnt OpenSSL version been updated for years?
On EA3 server:
root@server [~]# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013

root@server [~]# rpm -qa | grep openssl
alt-openssl-libs-1.0.2k-2.el6.cloudlinux.10.x86_64
openssl-1.0.1e-57.el6.x86_64
openssl-devel-1.0.1e-57.el6.x86_64

On EA4 server:

root@server2:/# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013

root@server2:/# rpm -qa | grep openssl
ea-openssl-1.0.2k-5.el7.cloudlinux.1.x86_64
openssl-devel-1.0.1e-60.el7_3.1.x86_64
alt-openssl-libs-1.0.2k-2.el7.cloudlinux.10.x86_64
openssl-1.0.1e-60.el7_3.1.x86_64
openssl-libs-1.0.1e-60.el7_3.1.x86_64

I see if I use your PHP versions it will use newer SSL, but using native cPanel PHP version it uses:
OpenSSL 1.0.1e-fips 11 Feb 2013

1.0.1 is no longer supported:

https://en.wikipedia.org/wiki/OpenSSL#Major_version_releases

Issue for customer is with calender for Thunderbird/Nextcloud and not PHP versions and SSL.

[bogdan.sh]

That is system OpenSSL, provided with RHEL. There is no way to update it differently from RedHat.

As far as I know version 1.0.2 will be shipped in newly released RH7.4, and if so - will be provided by CloudLinux7 after future update.

Yes, we do compile our alt-php with new OpenSSL, while native depends from system.

[bogdan.sh]

With the release of RHEL 7.4, how long will it be until Cloudlinux 7.4? Whats the average lag time?