OpenSSL denial of service attack - as standard!

[w3it]

Plesk loads with openSSL version 0.9.7a as standard. This has a denial of service attack flaw according to a security alert.

So I tried yum, up2date and even looked for an rpm to upgrade but to no avail. I am fairly new to the Linux world so what information should I be reading to help upgrade as when ever I try yum, up2date or rpm upgrading, it just does not work. This is meant as no offence to yum and up2date but I just do not understand the concept.

In this example I get "openssl is installed and the latest version." as a result which is wrong according to openssl.org.

Any help appreciated.


Thanks
Ian