This #heartbleed thing happened and it is prudent to roll certs on torproject.org, which may involve updating version pins in various third party browsers that implement same. **Trac**: **Username**: anon