If you think you have found a security bug in OpenSSL, please report it to us.

Note: Support for OpenSSL 1.0.1 ended on 31st December 2016 and is no longer receiving security updates