http://research.swtch.com/2008/05/lessons-from-debianopenssl-fiasco.html

good explanation of debian openssl bug. worth reading if programming is what u do for a living