If you think you have found a security bug in OpenSSL, please report it to us.

Note: Support for OpenSSL 0.9.8 ended on 31st December 2015 and is no longer receiving security updates