-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 09:31:58 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: i386
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
 .
   * Upload 0.4.9.x tree to debian-security:  Fixes, among other things:
     - TROVE-2026-004 (memory compare using the wrong length)
     - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha1:
 bd4cb10a8876bc5608c1ebaff114e47148908e44 4900852 tor-dbgsym_0.4.9.6-0+deb13u1_i386.deb
 349fca18072b7a4edba8b281abfc648685df7dc9 7477 tor_0.4.9.6-0+deb13u1_i386-buildd.buildinfo
 7d48760f0aa98c27cdfc794d1850e713ba96732a 2166980 tor_0.4.9.6-0+deb13u1_i386.deb
Checksums-Sha256:
 22b452814f1821a907ea9ad2f0067ab98fdc4861f73a4b8fa00598b9cf587260 4900852 tor-dbgsym_0.4.9.6-0+deb13u1_i386.deb
 d31beb28ce2facd28c81a06faa94bef45069bf8213d3164cd6b197553bfac6c7 7477 tor_0.4.9.6-0+deb13u1_i386-buildd.buildinfo
 e26f35bbb852c022c9ddbb124201cb385c8aa4b8eb88308ba52b93c0089beba3 2166980 tor_0.4.9.6-0+deb13u1_i386.deb
Files:
 089b356c9e006f0c1f8ec7ce2e002455 4900852 debug optional tor-dbgsym_0.4.9.6-0+deb13u1_i386.deb
 e1055d35e14774f906f708c643a1f873 7477 net optional tor_0.4.9.6-0+deb13u1_i386-buildd.buildinfo
 7867b430cfd79c3b56619c01d9c7348a 2166980 net optional tor_0.4.9.6-0+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=ACdk
-----END PGP SIGNATURE-----