"Upgrade" doesn't necessarily mean "upgrade to 1.0.1". Older versions are still getting updates. Unfortunately, this might not be clear to some readers because

"Upgrade" doesn't necessarily mean "upgrade to 1.0.1". Older versions are still getting updates. Unfortunately, this might not be clear to some readers because OpenSSL uses a weird versioning scheme. The three numbers stay the same, but the alphabetical part at the end gets incremented each time there's an update. > OpenSSL 0.9.8 SSL/TLS users should upgrade to 0.9.8za. > OpenSSL 1.0.0 SSL/TLS users should upgrade to 1.0.0m. > OpenSSL 1.0.1 SSL/TLS users should upgrade to 1.0.1h.