I forgot to explicity include the changelog entry in the bug report (though it is in the debdiff): proxytunnel (1.9.0+svn250-4) unstable; urgency=medium * Replace SSLv3 usage with TLSv1 to respond to CVE-2014-3566 removal of SSLv3 from openssl package (Closes: #767301) -- Julian Gilbey <jdg@debian.org> Fri, 07 Nov 2014 10:06:38 +0000 Julian