-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 09:31:58 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: armhf
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
 .
   * Upload 0.4.9.x tree to debian-security:  Fixes, among other things:
     - TROVE-2026-004 (memory compare using the wrong length)
     - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha1:
 bdb47d3b59a3e2293fcae09913a7e1d71ea661a8 5496260 tor-dbgsym_0.4.9.6-0+deb13u1_armhf.deb
 db78f15c8a3cf08daac538a7f73d3910cf8d159c 7413 tor_0.4.9.6-0+deb13u1_armhf-buildd.buildinfo
 78a1de6b57c1e202009fbd03f0122acbf12419e3 2022876 tor_0.4.9.6-0+deb13u1_armhf.deb
Checksums-Sha256:
 256d808b3fb4cb94de480251856125e3950ec35e00d666c29896647daeb53cd5 5496260 tor-dbgsym_0.4.9.6-0+deb13u1_armhf.deb
 940da126b6aba0d3f284590cb5cbbfc36bcae63942ffd0cfa4ea854b0567e680 7413 tor_0.4.9.6-0+deb13u1_armhf-buildd.buildinfo
 5cb3cb6ae79e5abee1f6340295175d5d52ffaaea13e2a5a7358d348ef60d8ccc 2022876 tor_0.4.9.6-0+deb13u1_armhf.deb
Files:
 bb7c05a631f72746af490ce2926cebec 5496260 debug optional tor-dbgsym_0.4.9.6-0+deb13u1_armhf.deb
 5f89656d177cc4117d20478af9ffec71 7413 net optional tor_0.4.9.6-0+deb13u1_armhf-buildd.buildinfo
 19fec8b87e65490f9d0cadec79df59c2 2022876 net optional tor_0.4.9.6-0+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmnSH+QACgkQLRECdjCZ
QkeIjQ/+L8Y/i8FQ6JPtL134ng6rFZjsPkXr2QdPfXFUdVLSc7Pn02ItaONjO+4k
mICgyitWMuC954xHOymPnJS0IJT9hlkTzCDXZ9UaAyfFGW/YfXUUlstchabXxMP/
yBMA8jpJU1SPU5BNxhR4uEysymgNJlnV9mZM+369wFNFHYUrCQwEW0NBNA8aZX8O
gtrLwKI12nQArDS2qMM7bHIPxslVsJ3nwY8mFxQHrvaDdK40Zm4riK1oebNWwjq8
zRBgNtBbsmYanuuN0X0Eo7SYYCnasLeT1pRQWzkjJcVtoZzdEsTSWn3ErIRqwTUB
ez1CcRpTkDlMKUXDjWGRcIzn9/5ORyCpGWefxHkKMlgzn6GC7VeeRuUcRt4nNYG3
beaiZfqOshmdWZmvvARSHTW7iETwX6MtKDKoHYZcd1EM2W0QNSVUh3mJeQY/s/xX
QOJutxdKuBCVq/UZQbk3JWGs+XXkXFhs7yKULOtaog5oCeRlFawRFW3FZUbRK8ct
dKD1mQVwqsR96if5rwDYy3tsvgMpEuphl0Ft6MZ66s2e1+6GD4W+f5jr2CPEhk/Q
WD52csZu4ApWyiVY8LIFA+aujfH57YprmNVMmL/IAZTxWo0BRLDgFnVWOc7+gexs
X2hrZRs7OX2NHmx7zD7kPf9XBHLESvLPC+jN1FD/KB4f7riaXac=
=y17R
-----END PGP SIGNATURE-----