After you saying that and re-reading the Security Fix post, this line threw me right off:
The patch downloads the correct and patched version of OpenSSL for the following versions and then installs the new package:
ZCS versions 8.0.3, 8.0.4, 8.0.5, 8.0.6, or 8.0.7
It sounded to me like the patch downloads the fixed version of openssl, then proceeds to upgrade your Zimbra! I have created a window to apply the official patch tonight. Thanks for your help, Quanah.