So, OpenSSL just got blown open.
It's really worth updating your servers as this is apparently as big as SQL injection was.

http://www.bbc.co.uk/news/technology-26935905
http://heartbleed.com/