Debian Package Tracker
Register | Log in
Subscribe

tor

anonymizing overlay network for TCP

Choose email to subscribe with

general
  • source: tor (main)
  • version: 0.4.9.12-4
  • maintainer: Peter Palfrader (DMD)
  • arch: all any
  • std-ver: 4.4.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 0.4.5.16-1
  • o-o-sec: 0.4.5.16-1
  • oldstable: 0.4.9.11-0+deb12u1
  • old-sec: 0.4.9.11-0+deb12u1
  • old-bpo: 0.4.8.14-1~bpo12+1
  • old-p-u: 0.4.9.11-0+deb12u1
  • stable: 0.4.9.11-0+deb13u1
  • stable-sec: 0.4.9.11-0+deb13u1
  • stable-bpo: 0.4.9.11-1~bpo13+1
  • testing: 0.4.9.11-1
  • unstable: 0.4.9.12-4
versioned links
  • 0.4.5.16-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.8.14-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-0+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-0+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.12-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.12-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • tor (38 bugs: 0, 25, 13, 0)
  • tor-geoipdb (2 bugs: 0, 2, 0, 0)
action needed
The VCS repository is not up to date, push the missing commits. high
vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits and/or your tags, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.
Created: 2026-04-06 Last update: 2026-09-12 16:32
8 security issues in trixie high

There are 8 open security issues in trixie.

8 important issues:
  • CVE-2026-87724: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.
  • TEMP-0000000-1CA3C2:
  • TEMP-0000000-539702:
  • TEMP-0000000-6FDF96:
  • TEMP-0000000-73CA4D:
  • TEMP-0000000-A0AD39:
  • TEMP-0000000-A6FE70:
  • TEMP-0000000-D99B95:
Created: 2026-09-09 Last update: 2026-09-11 23:31
8 security issues in forky high

There are 8 open security issues in forky.

8 important issues:
  • CVE-2026-87724: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.
  • TEMP-0000000-1CA3C2:
  • TEMP-0000000-539702:
  • TEMP-0000000-6FDF96:
  • TEMP-0000000-73CA4D:
  • TEMP-0000000-A0AD39:
  • TEMP-0000000-A6FE70:
  • TEMP-0000000-D99B95:
Created: 2026-09-09 Last update: 2026-09-11 23:31
8 security issues in bookworm high

There are 8 open security issues in bookworm.

8 important issues:
  • CVE-2026-87724: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.
  • TEMP-0000000-1CA3C2:
  • TEMP-0000000-539702:
  • TEMP-0000000-6FDF96:
  • TEMP-0000000-73CA4D:
  • TEMP-0000000-A0AD39:
  • TEMP-0000000-A6FE70:
  • TEMP-0000000-D99B95:
Created: 2026-09-09 Last update: 2026-09-11 23:31
8 bugs tagged patch in the BTS normal
The BTS contains patches fixing 8 bugs (9 if counting merged bugs), consider including or untagging them.
Created: 2026-09-02 Last update: 2026-09-12 19:00
Depends on packages which need a new maintainer normal
The packages that tor depends on which need a new maintainer are:
  • docbook-xsl (#802370)
    • Build-Depends: docbook-xsl
Created: 2023-09-01 Last update: 2026-09-12 16:31
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.4.0).
Created: 2019-09-29 Last update: 2026-09-12 16:32
testing migrations
  • This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
  • excuses:
    • Migration status for tor (0.4.9.11-1 to 0.4.9.12-4): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
    • Issues preventing migration:
    • ∙ ∙ Missing build on riscv64
    • ∙ ∙ Piuparts check waiting for test results - https://piuparts.debian.org/sid/source/t/tor.html
    • ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
    • ∙ ∙ Autopkgtest for apparmor: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered (will not be considered a regression) ♻ (reference ♻), i386: Test triggered (will not be considered a regression) ♻ (reference ♻), ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for onionbalance: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for onioncircuits: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for onionprobe: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for onionshare: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for sbws: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for tor: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Autopkgtest for torrequest: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
    • ∙ ∙ Lintian check waiting for test results - info
    • ∙ ∙ Too young, only 0 of 5 days old
    • Additional info (not blocking):
    • ∙ ∙ Reproduced on amd64 - info
    • ∙ ∙ Reproduced on arm64 - info
    • ∙ ∙ Reproduced on armhf - info
    • ∙ ∙ Reproduced on i386 - info
    • Not considered
news
[rss feed]
  • [2026-09-12] Accepted tor 0.4.9.12-4 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-09-11] Accepted tor 0.4.9.12-3 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-09-09] Accepted tor 0.4.9.12-2 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-07-03] tor 0.4.9.11-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-30] Accepted tor 0.4.9.11-0+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-30] Accepted tor 0.4.9.11-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-28] Accepted tor 0.4.9.11-0+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-28] Accepted tor 0.4.9.11-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-26] Accepted tor 0.4.9.11-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-06-26] Accepted tor 0.4.9.11-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-06-22] tor 0.4.9.9-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-19] Accepted tor 0.4.9.9-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-06-16] Accepted tor 0.4.9.9-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-05-14] Accepted tor 0.4.9.8-1~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-14] tor 0.4.9.8-1 MIGRATED to testing (Debian testing watch)
  • [2026-05-10] Accepted tor 0.4.9.8-0+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-10] Accepted tor 0.4.9.8-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-10] Accepted tor 0.4.9.8-0+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-10] Accepted tor 0.4.9.8-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-07] Accepted tor 0.4.9.8-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-07] Accepted tor 0.4.9.8-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-04-06] Accepted tor 0.4.9.6-0+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-06] Accepted tor 0.4.9.6-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-05] Accepted tor 0.4.9.6-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-05] Accepted tor 0.4.9.6-0+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-05] Accepted tor 0.4.9.6-1~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-03] Accepted tor 0.4.9.6-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-04-01] tor 0.4.9.6-1 MIGRATED to testing (Debian testing watch)
  • [2026-03-27] Accepted tor 0.4.9.6-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-03-21] Accepted tor 0.4.9.5-2~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: weasel@debian.org)
  • 1
  • 2
bugs [bug history graph]
  • all: 41 43
  • RC: 0
  • I&N: 27
  • M&W: 13 15
  • F&P: 1
  • patch: 8 9
links
  • homepage
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • screenshots
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 0.4.9.11-1build1
  • 18 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing