-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 5 Apr 2026 10:08:20 CEST
Source: tor
Architecture: source
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Peter Palfrader <weasel@debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Changes:
tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
.
* Upload 0.4.9.x tree to debian-security: Fixes, among other things:
- TROVE-2026-004 (memory compare using the wrong length)
- TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha256:
575273075997bfc76258dd010b3077d24059e7154719b9908effd443d2b5f96b 1985 tor_0.4.9.6-0+deb13u1.dsc
6d20b895e4dd160408fe04e49c1e5624ecc2e686a6fe1a94802bcac7cf833ef8 62184 tor_0.4.9.6-0+deb13u1.diff.gz
f90c066e16f489cc6f84470c3a476be62dd63563f8d1eda432b7ed743a2ea88f 6792 tor_0.4.9.6-0+deb13u1_source.buildinfo
a89aba97052e9963a654b40df2d46be07e8a6b6e24e5437917fd81acd90a7017 10759319 tor_0.4.9.6.orig.tar.gz
Checksums-Sha1:
f6a60e121a37810bc085c436d3234afd0da4abea 1985 tor_0.4.9.6-0+deb13u1.dsc
380ff9b241f08e71fffa43bd6a3061d52a7fb7b6 62184 tor_0.4.9.6-0+deb13u1.diff.gz
9c72c7eed5142759559b3ab0bd75435f278d759d 6792 tor_0.4.9.6-0+deb13u1_source.buildinfo
2932503cda38fe7254e6d666f4b54353a83c6ece 10759319 tor_0.4.9.6.orig.tar.gz
Files:
b0be3b75354579db88647fcd9e8a5593 1985 net optional tor_0.4.9.6-0+deb13u1.dsc
33cb6fe2df64977821b62e6686548497 62184 net optional tor_0.4.9.6-0+deb13u1.diff.gz
33f5217bd89c0fb6b5986930f33ac05a 6792 net optional tor_0.4.9.6-0+deb13u1_source.buildinfo
b37bbcf7cc1ad228e11a38e939a4652e 10759319 net optional tor_0.4.9.6.orig.tar.gz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEZI5W7zrm8w5X0SHVIw/UyqaI+y8FAmnSGN8ACgkQIw/UyqaI
+y8qOQf+KCeTHjc5W2nmzSmncOZvHmb1MqzFxPQfgYLaqKObELE37qCj1eS3XR3c
cjwJR1IVgzcjPsVH9w7mYi2i8WPQFn/F3bu7QeN7RUFFonP8ul2aW0i8KXk11w4H
ZOwj6bmomfq4xboDLzUX4joWePt2464CvQaptGpvwityVpBi+6vZRORlIeylM2td
O5U2Pv3Nr8fe7+efRv6G9aHuTQ0KiGYhOx3AbYb34uWtZvIglbeMZxoADNEBvBcE
VIZ/VuQ2vz7rdAEOZFeUu8+5IvncgzExBFlhHKAr361uQsXs6J+hMsos6Hr2d541
GIz2oE5x9ZLXT3zW/jzNSH7veuBBSw==
=jg0I
-----END PGP SIGNATURE-----
