The most recent openssl update has a side effect of installing unrequested packages on your system. For example, if you had openssl.rpm installed but not openssl-devel.rpm or openssl-doc.rpm then after running YOU and pulling down the package openssl you will now have all three installed.
Previous updates to openssl used three separate package files in /pub/suse/i386/update/7.1/patches and did not suffer from this problem. The last mod_php4 had the same problem and installed mod_php4-roxen unrequested too.
Trevor Hemsley, Security Specialist, Atos Origin Ltd, Whyteleafe, +44-(0)1883-628139
[This electronic transmission and any files attached to it are strictly confidential and intended solely for the addressee. If you are not the intended addressee, you must not disclose, copy or take any action in reliance of this transmission. If you have received this transmission in error, please notify us by return and delete the same. The views expressed in this electronic transmission do not necessarily reflect those of Atos Origin or any of its subsidiary companies. Although the sender endeavours to maintain a computer virus free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted. Thank You.]