Just confirmed in my own environment that the latest version of Serv-U 15.0.1 does currently use an OpenSSL 0.9.8.24. You can confirm this in your Serv-U installation directory. Specifically the two file versions to check are:
- SSLEAY32.DLL
- LIBEAY32.DLL
Hence Serv-U is not currently effected by this HeartBleed bug mentioned here http://heartbleed.com/