Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a security risk.
Warning: Application 'openssl', version '0.9.8o', is out of date, and possibly a security risk.

Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a security risk.
Warning: Application 'openssl', version '0.9.8o', is out of date, and possibly a security risk.
A major issues of software like rkhunter is that, in general, they only look at the upstream version number, and don't know about security patches backported into older versions of software included in long-term supported (stable) distributions.
You'll be better served to learn about the current status, security-wise, of these pieces of software in Debian, by looking at the Debian security tracker: