Heartbleed attack on Openssl

[Robert J. Hansen]

> Dear GNUPG community,

That right there should be your first hint.  :)

This is a great email list to get informed opinions on GnuPG and the
OpenPGP RFCs, but this may not be a great place to get informed
commentary on OpenSSL.  It's a completely different software package run
by a completely different outfit.

You may get better answers if you ask on the OpenSSL mailing lists.  :)