Meanwhile on OS X
MacPorts contained updates this morning.
Inspecting the system more closely:
OpenSSL 0.9.8zg 14 July 2015
Better, especially as /usr/local/bin gets precedence in the path bug 2.2.6 was released back in January.
C'mon Apple: release those upstream updates to your customers!