false : there was no code change ; not a single line in core client(s).

If you distribute or use binaries statically linked against openssl, update your openssl library (either system-wide or the local one you're using) and rebuild your binaries, that's it.

you could also eventually update your dependencies rules to force users building their own clients from your codebase to use a patched (as in 'recent') openssl library.