X-Git-Url: https://tinc-vpn.org/git/browse?p=wiki;a=blobdiff_plain;f=news%2Fheartbleed.mdwn;h=88e16181f8a08ac822ff3075aa43fe3972067558;hp=2b47f42f0d251e3390cb0b30370019e6ffbd497f;hb=132e19642fc7ee6239867d65e272a0d1d00dfbdd;hpb=291b7b7d8d51993c6a6cfcd8e464c96555b04323 diff --git a/news/heartbleed.mdwn b/news/heartbleed.mdwn index 2b47f42..88e1618 100644 --- a/news/heartbleed.mdwn +++ b/news/heartbleed.mdwn @@ -2,9 +2,9 @@ Tinc is *not vulnerable* to the Heartbleed bug. -The [Hearbleed bug](http://heartbleed.com/) +The [Heartbleed bug](http://heartbleed.com/) ([CVE-2014-0160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160)) is a bug in the [OpenSSL](https://en.wikipedia.org/wiki/Openssl) library that -affects any application which is linked to it and is making or accepting TLS +affects any application that is linked to it and is making or accepting TLS connections. Although tinc links to the OpenSSL library, it does not use the TLS protocol, and is therefore not vulnerable.