OpenSSL vulnerabilities ‘not as bad as feared