OpenSSL is still at 1.0.1h
Brought to you by:
marha
The included version of OpenSSL in 1.15.2.0 and the master branch is version 1.0.1h. 9 security vulnerabilities were announced on 2014-08-06, and OpenSSL 1.0.1i was released at the same time with fixes for all of them.
https://www.openssl.org/news/secadv_20140806.txt
https://www.openssl.org/source/
I fixed it on a branch and submitted a merge request.
https://sourceforge.net/p/vcxsrv/code/merge-requests/1/