Flaws have been found recently that affect the version of openssl in RHEL4 (as at re1117.0). See bug 136302 for more details.
confirmed fixed in re1123.1 tree