openssl vulnerability (CVE-2006-4339)

Hello! I wonder whether there are any plans to provide fixes for the openssl vulnerability described in http://www.heise.de/security/news/meldung/77783 and http://www.openssl.org/news/secadv_20060905.txt The fixes from upstream are available for more than two weeks now. In the meantime, there is even an exploit available: http://www.heise.de/security/news/meldung/78274