I presume the following are an issue for Zimbra, since OpenSSL is built in. Patches have been released for OSs but I don't see anything for Zimbra
What should be done about :
I'm running 8.0.7 with OpenSSL 1.0.1h 5 Jun 2014
That's good to know, although early November does seem like quite a long time compared to how long it took the various flavours of Linux that Zimbra sits on to release updated versions of OpenSSL.
Is there a specific reason Zimbra can't use OpenSSL that's found in the repositories ?
Don't understand why this is marked as a "Answer Suggested", in any case after patches/fixes ready to deploy.
This issue will fix in the next 8.5.1 and 8.0.9, you can follow the bug here - https://bugzilla.zimbra.com/show_bug.cgi?id=96008
I don't know the exact release date, but I know that it will be soon.