From: Guus Sliepen <guus@tinc-vpn.org>
Date: Thu, 10 Apr 2014 18:00:09 +0000 (+0200)
Subject: Mention that tinc is not vulnerable to the Heartbleed bug.
X-Git-Url: https://tinc-vpn.org/git/browse?a=commitdiff_plain;h=291b7b7d8d51993c6a6cfcd8e464c96555b04323;p=wiki

Mention that tinc is not vulnerable to the Heartbleed bug.
---

diff --git a/news/heartbleed.mdwn b/news/heartbleed.mdwn
new file mode 100644
index 0000000..2b47f42
--- /dev/null
+++ b/news/heartbleed.mdwn
@@ -0,0 +1,10 @@
+[[!meta author="guus"]]
+
+Tinc is *not vulnerable* to the Heartbleed bug.
+
+The [Hearbleed bug](http://heartbleed.com/)
+([CVE-2014-0160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160))
+is a bug in the [OpenSSL](https://en.wikipedia.org/wiki/Openssl) library that
+affects any application which is linked to it and is making or accepting TLS
+connections. Although tinc links to the OpenSSL library, it does not use the
+TLS protocol, and is therefore not vulnerable.