I forgot to explicity include the changelog entry in the bug report
(though it is in the debdiff):
proxytunnel (1.9.0+svn250-4) unstable; urgency=medium
* Replace SSLv3 usage with TLSv1 to respond to CVE-2014-3566 removal of
SSLv3 from openssl package (Closes: #767301)
-- Julian Gilbey <jdg@debian.org> Fri, 07 Nov 2014 10:06:38 +0000
Julian