We reported this issue to OpenSSL team in early September, and they told us they won’t treat it as a security issue, but they allowed us to discuss it with whomever we wish.

I don’t understand. Why isn’t this a security/reliability fix worth mentioning?