Backports.org has released an update for the openssl backport, which fixes several vulnerabilities.
# OpenSSL
deb http://www.backports.org/debian/ woody openssl