I forgot to explicity include the changelog entry in the bug report (though it is in the debdiff):
proxytunnel (1.9.0+svn250-4) unstable; urgency=medium * Replace SSLv3 usage with TLSv1 to respond to CVE-2014-3566 removal of SSLv3 from openssl package (Closes: #767301) -- Julian Gilbey <j...@debian.org> Fri, 07 Nov 2014 10:06:38 +0000 Julian -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20141107103525.ga25...@d-and-j.net