Update FAQ.

(cherry picked from commit 6cc0068430d0a4abdef0b466d422e6a4d154a5fe)

diff --git a/FAQ b/FAQ
index b046dd09927cf280b2e2a12566f64de5dd6108e4..70f488ecc16ca17ce44d2a4ccc96f89b6f26823c 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -768,6 +768,9 @@ openssl-security@openssl.org if you don't get a prompt reply at least
 acknowledging receipt then resend or mail it directly to one of the
 more active team members (e.g. Steve).
 
+Note that bugs only present in the openssl utility are not in general
+considered to be security issues. 
+
 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?