Federal Financial Institutions Examination Council said groups using Open SSL software should protect themselves by upgrading as soon as possible