I'm already to "g" on Jessie. Is that good? openssl: Installed: 1.0.1g-2 Candidate: 1.0.1g-2 Version table: *** 1.0.1g-2 0This is good as in "if you have restarted all processes using vulnerableparts of OpenSSL after updating all OpenSSL packages then you are not vulnerable anymore by Heartbleed".
dont forget to regenerate private keys / self signed certs afterwards!!