There is no source-code patch. Refer to http://www.openbsd.org/errata.html#sslUSA