Add a -r to your diff command so you recursively compare ... then you will see the actual code changes. Without the -r you are only comparing files in the top-level directory of each tree.
diff *-r* -dup openssl-1.0.2q openssl-1.0.2r Tim. ---------- Forwarded message ---------- From: Hong Cho <hong...@gmail.com> To: open...@openssl.org, openssl-project@openssl.org Cc: OpenSSL User Support ML <openssl-us...@openssl.org>, OpenSSL Announce ML <openssl-annou...@openssl.org> Bcc: Date: Wed, 27 Feb 2019 08:28:17 +0900 Subject: Re: [openssl-project] OpenSSL version 1.0.2q published I see no code change between 1.0.2q and 1.0.2r. ------ # diff -dup openssl-1.0.2q openssl-1.0.2r |& grep '^diff' | awk '{print $4}' openssl-1.0.2r/CHANGES openssl-1.0.2r/Makefile openssl-1.0.2r/Makefile.org openssl-1.0.2r/NEWS openssl-1.0.2r/README openssl-1.0.2r/openssl.spec hongch@hongch_bldx:~/downloads> diff -dup openssl-1.0.2q openssl-1.0.2r | & grep '^Only' Only in openssl-1.0.2q: Makefile.bak ------ It's supposed have a fix for CVE-2019-1559? Am I missing something? Hong.