Fedora has been on OpenSSL 1.0.1 since maybe March 14, 2012 (that was when the .spec was bumped, anyway)[0]. So quite a long window for Fedora users, unfortunately.
[0]: http://pkgs.fedoraproject.org/cgit/openssl.git/commit/?h=f18...
[0]: http://pkgs.fedoraproject.org/cgit/openssl.git/commit/?h=f18...
For more details: Fedora 18 shipped with OpenSSL 1.0.1c on 11-Sep-2012: http://mirrors.kernel.org/fedora/releases/18/Everything/x86_.... So that's 18 months of exposure for Fedora users (including me).