http://www.openssl.org/news/secadv_20140407.txt

We should patch and repack 

Regards !