-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 09:31:58 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: arm64
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
 .
   * Upload 0.4.9.x tree to debian-security:  Fixes, among other things:
     - TROVE-2026-004 (memory compare using the wrong length)
     - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha1:
 085c8109e4c0f883b41adb6e6817c79c0f85a1a2 5496188 tor-dbgsym_0.4.9.6-0+deb13u1_arm64.deb
 57bd3d393303905dc46a678e5794be48f9d80377 7534 tor_0.4.9.6-0+deb13u1_arm64-buildd.buildinfo
 9ecc072d6cf6311dfa5c0afb0c9aa608bb82428f 2001004 tor_0.4.9.6-0+deb13u1_arm64.deb
Checksums-Sha256:
 bd65c09dac765cf31b72048d2203c079b3cce576eee746002341f579893c3e5d 5496188 tor-dbgsym_0.4.9.6-0+deb13u1_arm64.deb
 c2f5bfa1cb4e0a333710afa9f2c5c3c45a2eba57416c7d0db7fb84d49fba3706 7534 tor_0.4.9.6-0+deb13u1_arm64-buildd.buildinfo
 7b14cfb110ec8e96ef69fb1efc4712927977d1d591402c822882227955a97c4a 2001004 tor_0.4.9.6-0+deb13u1_arm64.deb
Files:
 d511fee4591aea582543e28a8e5a8a60 5496188 debug optional tor-dbgsym_0.4.9.6-0+deb13u1_arm64.deb
 c6b80b684145bf73c983bb252c9400ac 7534 net optional tor_0.4.9.6-0+deb13u1_arm64-buildd.buildinfo
 fbb9751f5f03feb1033e104deef8195b 2001004 net optional tor_0.4.9.6-0+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=D2R9
-----END PGP SIGNATURE-----