-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Apr 2026 09:31:58 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: s390x
Version: 0.4.9.6-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium
 .
   * Upload 0.4.9.x tree to debian-security:  Fixes, among other things:
     - TROVE-2026-004 (memory compare using the wrong length)
     - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells)
Checksums-Sha1:
 8cbe07a1e3b114c8cfa2b70c274fbc13556accd1 5772624 tor-dbgsym_0.4.9.6-0+deb13u1_s390x.deb
 2bb45febeb78df4036fe39d51a40db5348f471b1 7409 tor_0.4.9.6-0+deb13u1_s390x-buildd.buildinfo
 db50145020998ee30b04cbb78abecbd89120cd85 2024700 tor_0.4.9.6-0+deb13u1_s390x.deb
Checksums-Sha256:
 b1cc27280635ea03a01f3352ff8dce2d90fa2d4ca8666c7cec913ba91f67791b 5772624 tor-dbgsym_0.4.9.6-0+deb13u1_s390x.deb
 d95eea4b4b414873c8f028e429c29d2fdf17eaeaeddcb9f991e1aa335f85d8a5 7409 tor_0.4.9.6-0+deb13u1_s390x-buildd.buildinfo
 19db27fc5850d868fe8f6659a4c2a92307fa0a758be13d73ff3fc7dfe788249a 2024700 tor_0.4.9.6-0+deb13u1_s390x.deb
Files:
 fe09165da3b7b4191b47466d8456084c 5772624 debug optional tor-dbgsym_0.4.9.6-0+deb13u1_s390x.deb
 475fa8b42dc6b04ca8d1eac09401ada9 7409 net optional tor_0.4.9.6-0+deb13u1_s390x-buildd.buildinfo
 72c676ca1da7ab5407879aa266ef0302 2024700 net optional tor_0.4.9.6-0+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=LQJA
-----END PGP SIGNATURE-----