[Dovecot] Heartbleed openssl vulnerability?

Do we know if dovecot is vulnerable to the heartbleed SSL problem?

I'm running dovecot-2.0.9 and openssl-1.01, the latter being intrinsically vulnerable. An on-line tool says that my machine is not affected on port 993 but it would be nice to know for sure if we were vulnerable for a while. (Naturally I've blocked it anyway!).

Thanks

John