&gt; Upgrading OpenSSL packages isn&#x27;t a trivial task, either. Since just about every other service links against the OpenSSL libraries, they too should be re-packaged (and tested!) to work against the latest OpenSSL release.<p>Not necessarily. You could simply statically link the newer OpenSSL library with your web server and everybody is happy.