From what I have seen The vulnerable versions of OpenSSL are 1.0.1
through 1.0.1f with two exceptions: OpenSSL 1.0.0 branch and 0.9.8
http://heartbleed.comhttp://www.pcworld.com/article/2140920/heartbleed-bug-in-openssl-puts-encrypted-communications-...
Adding Reboot To: Currently Selected (No bless) option. from Barnsaw's
comment resolved the touchless install issue I ran into just yesterday.
Policy and everything ran completed, but was not rebooting into the
installer.