Update FAQ.

(cherry picked from commit 6cc0068430d0a4abdef0b466d422e6a4d154a5fe)

diff --git a/FAQ b/FAQ
index 2f95a80ff9ce73ea36b35d8c232b4c3cd24d5184..473107fd663c45542a72ce22c3f571ba74653edf 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -767,6 +767,9 @@ openssl-security@openssl.org if you don't get a prompt reply at least
 acknowledging receipt then resend or mail it directly to one of the
 more active team members (e.g. Steve).
 
+Note that bugs only present in the openssl utility are not in general
+considered to be security issues. 
+
 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?