Debian Security Advisory 1571 affects tinc as well. Read more about it here.