no updates in arch linux yet but somehow it's already been patched in debian stable ... :^)

And of course, LibreSSL is dead in Linux, so were all screwed, I guess.

(also, yes, LibreSSL also has security vulnerabilities, but way less than OpenSSL.)