Debian Package Tracker
Register | Log in
Subscribe

tor

anonymizing overlay network for TCP

Choose email to subscribe with

general
  • source: tor (main)
  • version: 0.4.9.15-1
  • maintainer: Peter Palfrader (DMD)
  • arch: all any
  • std-ver: 4.4.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 0.4.5.16-1
  • o-o-sec: 0.4.5.16-1
  • oldstable: 0.4.9.11-0+deb12u1
  • old-sec: 0.4.9.11-0+deb12u1
  • old-bpo: 0.4.8.14-1~bpo12+1
  • old-p-u: 0.4.9.11-0+deb12u1
  • stable: 0.4.9.11-0+deb13u1
  • stable-sec: 0.4.9.14-0+deb13u1
  • stable-bpo: 0.4.9.11-1~bpo13+1
  • stable-p-u: 0.4.9.14-0+deb13u1
  • testing: 0.4.9.14-1
  • unstable: 0.4.9.15-1
versioned links
  • 0.4.5.16-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.8.14-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-0+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-0+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.11-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.14-0+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.14-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 0.4.9.15-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • tor (21 bugs: 0, 13, 8, 0)
  • tor-geoipdb (1 bugs: 0, 1, 0, 0)
action needed
lintian reports 1 error and 13 warnings high
Lintian reports 1 error and 13 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2026-09-12 Last update: 2026-10-29 12:00
21 security issues in bookworm high

There are 21 open security issues in bookworm.

21 important issues:
  • CVE-2026-87724: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.
  • TEMP-0000000-1CA3C2:
  • TEMP-0000000-3CF1F7:
  • TEMP-0000000-539702:
  • TEMP-0000000-6FDF96:
  • TEMP-0000000-73CA4D:
  • TEMP-0000000-A0AD39:
  • TEMP-0000000-A6FE70:
  • TEMP-0000000-BA1295:
  • TEMP-0000000-D99B95:
  • TEMP-0000000-DF365C:
  • TEMP-1122517-1C4480:
  • TEMP-1122517-2B93EA:
  • TEMP-1122517-48C855:
  • TEMP-1122517-4A6C26:
  • TEMP-1122517-51B74E:
  • TEMP-1122517-8623E7:
  • TEMP-1122517-86ED1E:
  • TEMP-1122517-A6F432:
  • TEMP-1122517-E22D29:
  • TEMP-1122517-FF3C3E:
Created: 2026-09-09 Last update: 2026-10-29 00:20
The VCS repository is not up to date, push the missing commits. high
vcswatch reports that the current version of the package is not in its VCS.
Either you need to push your commits and/or your tags, or the information about the package's VCS are out of date. A common cause of the latter issue when using the Git VCS is not specifying the correct branch when the packaging is not in the default one (remote HEAD branch), which is usually "master" but can be modified in salsa.debian.org in the project's general settings with the "Default Branch" field). Alternatively the Vcs-Git field in debian/control can contain a "-b <branch-name>" suffix to indicate what branch is used for the Debian packaging.
Created: 2026-04-06 Last update: 2026-10-28 22:34
6 bugs tagged patch in the BTS normal
The BTS contains patches fixing 6 bugs (7 if counting merged bugs), consider including or untagging them.
Created: 2026-09-02 Last update: 2026-10-29 17:30
Depends on packages which need a new maintainer normal
The packages that tor depends on which need a new maintainer are:
  • docbook-xsl (#802370)
    • Build-Depends: docbook-xsl
Created: 2023-09-01 Last update: 2026-10-29 15:30
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.4.0).
Created: 2019-09-29 Last update: 2026-10-29 00:21
testing migrations
  • This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
  • excuses:
    • Migration status for tor (0.4.9.14-1 to 0.4.9.15-1): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
    • Issues preventing migration:
    • ∙ ∙ Missing build on ppc64el
    • ∙ ∙ Missing build on riscv64
    • ∙ ∙ Autopkgtest deferred on ppc64el: missing arch:ppc64el build
    • ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
    • ∙ ∙ Autopkgtest for apparmor/4.1.8-3: amd64: Pass, arm64: Pass, armhf: Failed (not a regression) ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, s390x: Pass
    • ∙ ∙ Autopkgtest for onionbalance/0.2.4-0.4: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, armhf: No tests, superficial or marked flaky ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, s390x: No tests, superficial or marked flaky ♻ (reference ♻)
    • ∙ ∙ Autopkgtest for onioncircuits/0.9-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, s390x: Pass
    • ∙ ∙ Autopkgtest for onionprobe/1.4.1+ds-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, s390x: Pass
    • ∙ ∙ Autopkgtest for onionshare/2.6.5-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, s390x: Pass
    • ∙ ∙ Autopkgtest for sbws/2.2.0-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, s390x: Pass
    • ∙ ∙ Autopkgtest for tor/0.4.9.15-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Test triggered, loong64: Test triggered, s390x: No tests, superficial or marked flaky ♻ (reference ♻)
    • ∙ ∙ Autopkgtest for torrequest/0.1.0-3: amd64: No tests, superficial or marked flaky ♻, arm64: No tests, superficial or marked flaky ♻, armhf: No tests, superficial or marked flaky ♻ (reference ♻), i386: Test triggered, loong64: Test triggered, s390x: No tests, superficial or marked flaky ♻ (reference ♻)
    • ∙ ∙ Lintian check waiting for test results on ppc64el, riscv64 - info
    • ∙ ∙ Reproducibility check waiting for results on amd64 - info
    • ∙ ∙ Too young, only 0 of 5 days old
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/t/tor.html
    • ∙ ∙ Reproduced on arm64 - info
    • ∙ ∙ Reproduced on armhf - info
    • ∙ ∙ Reproduced on i386 - info
    • Not considered
news
[rss feed]
  • [2026-10-28] Accepted tor 0.4.9.15-1 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-10-14] tor 0.4.9.14-1 MIGRATED to testing (Debian testing watch)
  • [2026-10-11] Accepted tor 0.4.9.14-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-10-10] Accepted tor 0.4.9.14-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-10-08] Accepted tor 0.4.9.14-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-10-05] tor 0.4.9.13-1 MIGRATED to testing (Debian testing watch)
  • [2026-10-02] Accepted tor 0.4.9.13-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-10-02] Accepted tor 0.4.9.12-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-09-30] Accepted tor 0.4.9.13-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-09-28] Accepted tor 0.4.9.13-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-09-21] Accepted tor 0.4.9.12-0+deb13u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-09-16] Accepted tor 0.4.9.12-0+deb13u2 (source) into stable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-09-16] Accepted tor 0.4.9.12-0+deb13u1 (source) into stable-security (Debian FTP Masters)
  • [2026-09-16] tor 0.4.9.12-4 MIGRATED to testing (Debian testing watch)
  • [2026-09-12] Accepted tor 0.4.9.12-4 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-09-11] Accepted tor 0.4.9.12-3 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-09-09] Accepted tor 0.4.9.12-2 (source) into unstable (Peter Palfrader) (signed by: weasel@debian.org)
  • [2026-07-03] tor 0.4.9.11-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-30] Accepted tor 0.4.9.11-0+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-30] Accepted tor 0.4.9.11-0+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-28] Accepted tor 0.4.9.11-0+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-28] Accepted tor 0.4.9.11-0+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
  • [2026-06-26] Accepted tor 0.4.9.11-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-06-26] Accepted tor 0.4.9.11-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-06-22] tor 0.4.9.9-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-19] Accepted tor 0.4.9.9-1~bpo13+1 (source) into stable-backports (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-06-16] Accepted tor 0.4.9.9-1 (source) into unstable (Jérôme Charaoui) (signed by: weasel@debian.org)
  • [2026-05-14] Accepted tor 0.4.9.8-1~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: weasel@debian.org)
  • [2026-05-14] tor 0.4.9.8-1 MIGRATED to testing (Debian testing watch)
  • [2026-05-10] Accepted tor 0.4.9.8-0+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: weasel@debian.org)
  • 1
  • 2
bugs [bug history graph]
  • all: 23 24
  • RC: 0
  • I&N: 14
  • M&W: 9 10
  • F&P: 0
  • patch: 6 7
links
  • homepage
  • lintian (1, 13)
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • screenshots
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 0.4.9.11-1build1
  • 18 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing