Looking at the install logs I see that openssl has not been touched for some time:
/var/log/yum.log.2:Jan 09 09:35:34 Updated: openssl - 0.9.8b-10.el5_2.1.i686 /var/log/yum.log.2:Jan 09 09:35:43 Updated: openssl-devel - 0.9.8b-10.el5_2.1.i386 /var/log/yum.log.2:Apr 03 19:14:55 Updated: openssl-0.9.8e-7.el5.i686 /var/log/yum.log.2:Apr 03 19:19:08 Updated: openssl-devel-0.9.8e-7.el5.i386 /var/log/yum.log.3:Jun 27 15:33:06 Updated: openssl.i686 0.9.8b-10.el5 /var/log/yum.log.3:Jun 27 15:42:29 Updated: openssl-devel.i386 0.9.8b-10.el5 /var/log/yum.log:Jan 21 14:11:30 Updated: openssl-0.9.8e-12.el5_4.1.i686 /var/log/yum.log:Jan 21 14:13:01 Updated: openssl-devel-0.9.8e-12.el5_4.1.i386 /var/log/yum.log:Mar 29 09:03:29 Updated: openssl-0.9.8e-12.el5_4.6.i686 /var/log/yum.log:Mar 29 09:03:40 Updated: openssl-devel-0.9.8e-12.el5_4.6.i386 /var/log/rpmpkgs.1:openssl-0.9.8e-12.el5_4.6.i686.rpm /var/log/rpmpkgs.1:openssl-devel-0.9.8e-12.el5_4.6.i386.rpm