There’s a buffer overflow in OpenSSL that was (re)found recently; there’s a patch available, and it looks like we need it.