HeartBleed bug

[Maurice Howe]

According to MalwareBytes, Apache is very vulnerable to the HeartBleed bug.
Any truth in that?  Here's what they say:
 
Cheers,
Maurice Howe
 
"It is a bug in OPEN SSL. It affects version 1.0.1 through 1.0.1f
(inclusive), and it affects servers that run Apache and NGINX mostly. Open
SSL is used in a lot of things and the complete list of what is affected has
yet to be tabulated, so there's probably other stuff too. Apache and NGINX
are the most important ones to start with."