The ports-secteam knows about this but posting here in case someone wants to update ahead of the port, from this morning's Hackernews: <https://www.openssl.org/news/secadv_20150611.txt> Roger