[Pkg-openssl-devel] Bug#603709: CVE-2010-3864 - what's vulnerable?

[Tim Small]

Package: openssl
Severity: normal

I've tried to research what's likely to actually be vulnerable to this
issue, in terms of Debian packages or other commonly used third party
apps, but couldn't find anything.

Is anything which ships with Lenny / Squeeze actually vulnerable to this
in it's default config or otherwise?

Thanks,

Tim.