Index: basicnet/mailnews/mailx.xml
===================================================================
--- basicnet/mailnews/mailx.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ basicnet/mailnews/mailx.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -9,5 +9,5 @@
   <!ENTITY mailx-md5sum        "0c93759e34200eb56a0e7c464680a54a">
   <!ENTITY mailx-size          "265 KB">
-  <!ENTITY mailx-buildsize     "3.0 MB">
+  <!ENTITY mailx-buildsize     "3.6 MB">
   <!ENTITY mailx-time          "less than 0.1 SBU">
 ]>
@@ -39,5 +39,5 @@
     especially useful for writing scripts and batch processing.</para>
 
-    <para>&lfssvn_checked;20100803&lfssvn_checked2;</para>
+    &lfs67_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
@@ -59,4 +59,14 @@
       <listitem>
         <para>Estimated build time: &mailx-time;</para>
+      </listitem>
+    </itemizedlist>
+
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing='compact'>
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/mailx-&mailx-version;-openssl_1.0.0_build_fix-1.patch"/>
+        (if you intend to link this package against
+        <application>openssl</application>)</para>
       </listitem>
     </itemizedlist>
@@ -82,5 +92,6 @@
     following commands.</para>
 
-<screen><userinput>make SENDMAIL=/usr/sbin/sendmail</userinput></screen>
+<screen><userinput>patch -Np1 -i ../mailx-&mailx-version;-openssl_1_0_0_build_fix-1.patch &amp;&amp;
+make SENDMAIL=/usr/sbin/sendmail</userinput></screen>
 
     <para>This package does not come with a test suite.</para>
Index: basicnet/mailnews/mutt.xml
===================================================================
--- basicnet/mailnews/mutt.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ basicnet/mailnews/mutt.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -29,4 +29,8 @@
     Agent. This is useful for reading, writing, replying to, saving, and
     deleting your email.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use mutt-1.5.21.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
Index: general.ent
===================================================================
--- general.ent	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ general.ent	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -4,5 +4,5 @@
 -->
 
-<!ENTITY day          "17">                   <!-- Always 2 digits -->
+<!ENTITY day          "18">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2010">
@@ -91,7 +91,7 @@
 <!-- Chapter 4 -->
 
-<!ENTITY openssl-version              "0.9.8n">
+<!ENTITY openssl-version              "1.0.0b">
 <!-- The ca-bundle-version should be updated to match nss version -->
-<!ENTITY ca-bundle-version            "3.12.5">
+<!ENTITY ca-bundle-version            "3.12.8.0">
 <!ENTITY gnutls-version               "2.8.6">
 <!ENTITY cracklib-version             "2.8.18">
Index: general/prog/ruby.xml
===================================================================
--- general/prog/ruby.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ general/prog/ruby.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -35,4 +35,8 @@
     <application>Ruby</application> development environment. This
     is useful for object-oriented scripting.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use ruby-1.9.2-p0 or newer.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ introduction/welcome/changelog.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -41,4 +41,14 @@
 
 -->
+
+    <listitem>
+      <para>November 18th, 2010</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Updated to openssl-1.0.0b to fix CVE-2010-3864 (fixes ticket
+          <ulink url="&blfs-ticket-root;3146">#3146</ulink>)</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
 
     <listitem>
Index: postlfs/security/heimdal.xml
===================================================================
--- postlfs/security/heimdal.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ postlfs/security/heimdal.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -63,4 +63,8 @@
     <ulink url="&files-anduin;/heimdal-overwrites"/> for a complete list of
     all the files and commands to rename each of them.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to use the heimdal-1.4 series.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
Index: postlfs/security/openssl.xml
===================================================================
--- postlfs/security/openssl.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ postlfs/security/openssl.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -7,11 +7,11 @@
   <!ENTITY openssl-download-http "http://www.openssl.org/source/openssl-&openssl-version;.tar.gz">
   <!ENTITY openssl-download-ftp  "ftp://ftp.openssl.org/source/openssl-&openssl-version;.tar.gz">
-  <!ENTITY openssl-md5sum        "076d8efc3ed93646bd01f04e23c07066">
-  <!ENTITY openssl-size          "3.7 MB">
+  <!ENTITY openssl-md5sum        "104deb3b7e6820cae6de3f49ba0ff2b0">
+  <!ENTITY openssl-size          "3.9 MB">
   <!ENTITY ca-bundle-download    "http://anduin.linuxfromscratch.org/files/BLFS/BLFS-ca-bundle-&ca-bundle-version;.tar.bz2">
-  <!ENTITY ca-bundle-size        "224 KB">
-  <!ENTITY ca-bundle-md5sum      "84287d75a4137d00020b1b89a472f5e7">
-  <!ENTITY openssl-buildsize     "47 MB">
-  <!ENTITY openssl-time          "1.2 SBU (additional 0.3 SBU to run the test suite)">
+  <!ENTITY ca-bundle-size        "196 KB">
+  <!ENTITY ca-bundle-md5sum      "da705ed29e5abcb42d498bcc86d1e62e">
+  <!ENTITY openssl-buildsize     "54 MB">
+  <!ENTITY openssl-time          "1.2 SBU (additional 0.4 SBU to run the test suite)">
 ]>
 
@@ -75,6 +75,7 @@
     <itemizedlist spacing='compact'>
       <listitem>
-        <para>Required patch: <ulink
-        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/></para>
+        <para>Required patches: <ulink
+        url="&patch-root;/openssl-&openssl-version;-fix_manpages-1.patch"/> and
+        <ulink url="&patch-root;/openssl-&openssl-version;-fix_testsuite-1.patch"/></para>
       </listitem>
     </itemizedlist>
@@ -84,6 +85,6 @@
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional"><xref linkend="mitkrb"/> or
-    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required to run the
-    test suite during the build)</para>
+    <xref linkend="heimdal"/>, and <xref linkend="bc"/> (required for full
+    coverage by the test suite during the build)</para>
 
     <para condition="html" role="usernotes">User Notes:
@@ -99,4 +100,5 @@
 
 <screen><userinput>patch -Np1 -i ../openssl-&openssl-version;-fix_manpages-1.patch &amp;&amp;
+patch -Np1 -i ../openssl-&openssl-version;-fix_testsuite-1.patch &amp;&amp;
 tar -vxf ../BLFS-ca-bundle-&ca-bundle-version;.tar.bz2 &amp;&amp;
 
@@ -228,7 +230,8 @@
         <seg>libcrypto.{so,a}, libssl.{so,a}, and additional encryption
         libraries in /usr/lib/engines/ (lib4758cca.so, libaep.so,
-        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so, libnuron.so,
-        libsureware.so, and libubsec.so)</seg>
-        <seg>/etc/ssl, /usr/include/ssl, /usr/lib/engines
+        libatalla.so, libcapi.so, libchil.so, libcswift.so, libgmp.so,
+        libgost.so, libnuron.so, libpadlock.so, libsureware.so, and
+        libubsec.so)</seg>
+        <seg>/etc/ssl, /usr/include/openssl, /usr/lib/engines
         and /usr/share/doc/openssl-&openssl-version;</seg>
       </seglistitem>
Index: server/databases/postgresql.xml
===================================================================
--- server/databases/postgresql.xml	(revision afe66bc3e7b9676036f4bb5fa48fbeea10b3524d)
+++ server/databases/postgresql.xml	(revision a1813d0832f300b9f0b1f74e7e108c557eb9ba74)
@@ -41,4 +41,9 @@
     existing BLFS instructions. Note that versions other than the one shown
     in the download URLs have not been tested in a BLFS environment.</para>
+
+    <!-- FIXME -->
+    <para>If you intend to link this application to <xref linkend="openssl"/>
+    you will need to move to a newer version of <application>PostgreSQL</application>,
+    1.9.0.1 is known to build.</para>
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
