diff --git a/metadata/de.blinkt.openvpn.txt b/metadata/de.blinkt.openvpn.txt
index 7a4eb76dad..4adf5040d3 100644
--- a/metadata/de.blinkt.openvpn.txt
+++ b/metadata/de.blinkt.openvpn.txt
@@ -117,8 +117,9 @@ Build:0.6.11,92
     buildjni=no
 
 Maintainer Notes:
-This has (as at 0.6.11) openssl 1.0.0e source code embedded in the source
-repo. It is not vulnerable to CVE-2014-0160.
+This has (as at 0.6.17) openssl 1.0.0e source code embedded in the source
+repo. It is not vulnerable to CVE-2014-0160. Earlier versions use Android's
+system OpenSSL libraries and are vulnerable if the Android version is.
 .
 
 Auto Update Mode:None