This question already has an answer here:
I run a linux AMI on AWS with version 1.0.1k of openssl
$ openssl version -v OpenSSL 1.0.1k-fips 8 Jan 2015
PCI compliance requires a version greater than 1.0.1p because they claim that there are known security issues with older versions. When I try to update the openssl package on the machine using 'yum' I am told that openssl is up to date.
$ sudo yum update openssl No packages marked for update
Does anyone else have a similar problem? Is it possible to install the latest openssl on the Linux AMI? Is the Linux AMI not capable of being PCI compliant?
For background, I am using Amazon Linux AMI release 2015.09
$ cat /etc/*-release Amazon Linux AMI release 2015.09