diff --git a/CHANGES b/CHANGES
index ed0b0b8f04..a5b06f61d3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+1349.	[security]	Mimimum OpenSSL version now 0.9.6e (was 0.9.5a).
+			http://www.cert.org/advisories/CA-2002-23.html
+
 1348.	[port]		Win32: Rewrote code to use I/O Completion Ports
 			in socket.c and eliminating a host of socket
 			errors. Performance is enhanced.
diff --git a/configure b/configure
index a9b9e491eb..265f365348 100755
--- a/configure
+++ b/configure
@@ -1,5 +1,5 @@
 #! /bin/sh
-# From configure.in Revision: 1.327 .
+# From configure.in Revision: 1.328 .
 # Guess values for system-dependent variables and create Makefiles.
 # Generated by GNU Autoconf 2.53.
 #
@@ -4373,11 +4373,11 @@ else
 #include <stdio.h>
 #include <openssl/opensslv.h>
 int main() {
-        if (OPENSSL_VERSION_NUMBER >= 0x0090581fL)
+        if (OPENSSL_VERSION_NUMBER >= 0x0090605fL)
                 return (0);
 	printf("\n\nFound   OPENSSL_VERSION_NUMBER %#010x\n",
 		OPENSSL_VERSION_NUMBER);
-	printf("Require OPENSSL_VERSION_NUMBER 0x0090581f or greater\n\n");
+	printf("Require OPENSSL_VERSION_NUMBER 0x0090605f or greater\n\n");
         return (1);
 }
 
@@ -4402,8 +4402,8 @@ cat conftest.$ac_ext >&5
 ( exit $ac_status )
 echo "$as_me:$LINENO: result: not compatible" >&5
 echo "${ECHO_T}not compatible" >&6
-		 { { echo "$as_me:$LINENO: error: you need OpenSSL 0.9.5a or newer" >&5
-echo "$as_me: error: you need OpenSSL 0.9.5a or newer" >&2;}
+		 { { echo "$as_me:$LINENO: error: you need OpenSSL 0.9.6e or newer" >&5
+echo "$as_me: error: you need OpenSSL 0.9.6e or newer" >&2;}
    { (exit 1); exit 1; }; }
 fi
 rm -f core core.* *.core conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext
diff --git a/configure.in b/configure.in
index e3dfd416a9..857a5de173 100644
--- a/configure.in
+++ b/configure.in
@@ -18,7 +18,7 @@ AC_DIVERT_PUSH(AC_DIVERSION_NOTICE)dnl
 esyscmd([sed "s/^/# /" COPYRIGHT])dnl
 AC_DIVERT_POP()dnl
 
-AC_REVISION($Revision: 1.327 $)
+AC_REVISION($Revision: 1.328 $)
 
 AC_INIT(lib/dns/name.c)
 AC_PREREQ(2.13)
@@ -395,17 +395,17 @@ shared library configuration (e.g., LD_LIBRARY_PATH).)],
 #include <stdio.h>
 #include <openssl/opensslv.h>
 int main() {
-        if (OPENSSL_VERSION_NUMBER >= 0x0090581fL)
+        if (OPENSSL_VERSION_NUMBER >= 0x0090605fL)
                 return (0);
 	printf("\n\nFound   OPENSSL_VERSION_NUMBER %#010x\n",
 		OPENSSL_VERSION_NUMBER);
-	printf("Require OPENSSL_VERSION_NUMBER 0x0090581f or greater\n\n");
+	printf("Require OPENSSL_VERSION_NUMBER 0x0090605f or greater\n\n");
         return (1);
 }
 ],
 	        [AC_MSG_RESULT(ok)],
 		[AC_MSG_RESULT(not compatible)
-		 AC_MSG_ERROR(you need OpenSSL 0.9.5a or newer)],
+		 AC_MSG_ERROR(you need OpenSSL 0.9.6e or newer)],
 		[AC_MSG_RESULT(assuming target platform has compatible version)])
 		CFLAGS="$saved_cflags"
 		LIBS="$saved_libs"