On Mon, 07 Apr 2014, Roger Dingledine wrote: > https://www.openssl.org/news/vulnerabilities.html#2014-0160 > http://heartbleed.com/ > > Is TBB affected? Is there a plan for an update? On friday tbb meeting, Mike was talking about doing a new 3.5.x release in the begining of the week, for a security release of one of the components.