Comment Comment by notherhack Looks like Debian and some other distros are still on the vulnerable 3.5.4. Why did Openssl publish before the distros rolled to the fixed version? parent notherhack 9 months ago