> >1.0.1k appears to have been shipped 9-Jan-2015. > > I'm using 1.0.2. Apparently that included the fix, they just didn't talk > about it. Presumably, in keeping with the OpenSSL tradition, there is no ABI change and no new function between 1.0.1 and 1.0.2 - we only expect them on letter changes like 1.0.1k to 1.0.1l....