-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 09:31:58 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: amd64
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
 .
   * Upload 0.4.9.x tree to debian-security:  Fixes, among other things:
     - TROVE-2026-004 (memory compare using the wrong length)
     - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha1:
 9367567274f7d9f97b5c666df04b34a17e080ce3 5853568 tor-dbgsym_0.4.9.6-0+deb13u1_amd64.deb
 0e1ac8c1ea5baa465194c4b5ae3d41567e08e36f 7576 tor_0.4.9.6-0+deb13u1_amd64-buildd.buildinfo
 d8fd16ecc6c8ceff1936bfaf8490d6bde85b531f 2081728 tor_0.4.9.6-0+deb13u1_amd64.deb
Checksums-Sha256:
 dcf1fa8afdfeae3aab4ce1345f3278fe47ec9b05a098934ac176476aca4b797e 5853568 tor-dbgsym_0.4.9.6-0+deb13u1_amd64.deb
 8db0bac601ac98556f701811b2a5a9ae9aabf6dfe91c2b8d3ed0f39dea9f30dc 7576 tor_0.4.9.6-0+deb13u1_amd64-buildd.buildinfo
 ba6daec354799196df225f3cb54e9595da845f947b078ae1f5a1a2cd023117de 2081728 tor_0.4.9.6-0+deb13u1_amd64.deb
Files:
 53910d2c12beed126c5a6403863b7d3e 5853568 debug optional tor-dbgsym_0.4.9.6-0+deb13u1_amd64.deb
 81007a7ac6a3eeaa00a96f7b2e6b5825 7576 net optional tor_0.4.9.6-0+deb13u1_amd64-buildd.buildinfo
 88c4949e30e18311f4b7f6b70765b0fe 2081728 net optional tor_0.4.9.6-0+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmnSH4MACgkQbheoBegw
XLIQmA//aTjAmej7ddUgzAe/rLhQixIgGgoNApheLZ1m/JHbV5PZ6Kv5QPxMDdi8
ODklw9fJNFpEx9zl+xcZY5xvBPq8JW7oJBTWPwOuXKRy4cbakFx+nCn/YUHSC4Te
sR6Squ6X9SKRNYeQ1ZsmLzKTt7cVq4jqnm0Ml/K+1qS35B4dB7NjLuXOo9Op395n
dYcYcd03LeEDvf58/WRHCFEFIDzI3+VaJyKPVaebWmSguHvR6Alzl5bYNGN2VfF5
IByrGEbn6miIJ2ouYYQ66hNtBrROseal5DjQRrUGR5o3W4y7fKv70RTxOkvK7WBB
jyXaooT2AzkRUo6833XGv799eDqU5jHFtbgEEQqnbnjN59OTxuLwgIyr3iKnBlXL
0LVoseEzGORjVEqurfMvRHep4hMuX/gkp4DQicp4p0wBN/yNOuYT/ZsxLBxBuuIE
r34TouUs/yg32PE/YXrZxHyFiazJwtZCt2KBVTrbYQSEIQS16alGxrTsw+XmnKVe
WWnJScUr3PRFnBkHIyltYwB8vlLwvWVJILbJ1BogzEjLe45BBojG+pi2XDaH7YVB
t1xI6rTBtyhOF5qUY/Z/+7H2YYpJP0kUfPz1YL47TF0SnAlkYzZI9fYbzSGEqy3w
PSJmCpWNkqILZv6z6uI4F8aEdGkGt4+GvwCXKhP305FRVO7vOyI=
=Tzyw
-----END PGP SIGNATURE-----