OpenSSL bug CVE-2014-0160 – Torproject Advisory
blog.torproject.org