Did TOR affect Heartbleed?

Question

OpenSSL

In the screenshot, we can see that the latest version of TOR is running using OpenSSL 1.0.1f. And she seems to be vulnerable.
Are there any reasons for concern?

Answer 1

habrahabr.ru/company/eset/blog/218945
Affected by the vulnerability: indirectly, through other servers
Need to change the password?: depends on the target server. If you need strong anonymity or privacy on the Internet, you might want to stay away from the Internet entirely for the next few days while things settle.
See https://blog.torproject.org/blog/openssl-bug-cve-2...