I see that 1.5.3 is out now.  I also see a security advisory 
concerning OpenSSL.  I do not see any patches in the 1.5.3 hierarchy 
that address fixing it.

Any idea when they'll be out?

Pity about the timing.  I had really hoped 1.5.3 would be "clean" for 
at least *some* time.
-- 
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu