Customers keep asking about versions of OpenSSL in Solaris and they are especially interested in whether security patches are included. We deliver all security patches in a timely manner but cannot easily upgrade OpenSSL versions since all the neccessary testing of all consumers takes a lot of time.
What we suggest here is to notify a customer through OpenSSL version string that our version was updated and contains all the security fixes up to the exact date. Version string is what 'openssl version' prints:
$ openssl version
OpenSSL 0.9.8a 11 Oct 2005
we suggest this:
$ openssl version
OpenSSL 0.9.8a 11 Oct 2005 (+ security patches to 2006-09-29)