Upgrading OPENSSL is ___FAR___ from being enough.
I recommend you at least but I'm not exhaustive :
- upgrade OPENSSL to a safe version like you did
- make you rusers change all their passwords, they may have been compromised
- change all your ssl certificates.
More detailed answers can be found here : Heartbleed: What is it and what are options to mitigate it?
To check if your version of OPENSSL is not vulnerable on any debian based distribution, you can do the following :
apt-get update && apt-get install openssl
If you obtain
openssl is already the newest version.
then you are not vulnerable. All major linux and BSD distributions have included a safe version of openssl really quickly.
As of today, here is the expected output :
# openssl version -a
OpenSSL 1.0.1e 11 Feb 2013
built on: Thu Apr 17 20:54:07 UTC 2014