-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 5 Apr 2026 10:08:20 CEST Source: tor Architecture: source Version: 0.4.9.6-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Peter Palfrader Changed-By: Peter Palfrader Changes: tor (0.4.9.6-0+deb13u1) trixie-security; urgency=medium . * Upload 0.4.9.x tree to debian-security: Fixes, among other things: - TROVE-2026-004 (memory compare using the wrong length) - TROVE-2025-016 (out-of-bounds read error with V1 EXTEND cells) Checksums-Sha256: 575273075997bfc76258dd010b3077d24059e7154719b9908effd443d2b5f96b 1985 tor_0.4.9.6-0+deb13u1.dsc 6d20b895e4dd160408fe04e49c1e5624ecc2e686a6fe1a94802bcac7cf833ef8 62184 tor_0.4.9.6-0+deb13u1.diff.gz f90c066e16f489cc6f84470c3a476be62dd63563f8d1eda432b7ed743a2ea88f 6792 tor_0.4.9.6-0+deb13u1_source.buildinfo a89aba97052e9963a654b40df2d46be07e8a6b6e24e5437917fd81acd90a7017 10759319 tor_0.4.9.6.orig.tar.gz Checksums-Sha1: f6a60e121a37810bc085c436d3234afd0da4abea 1985 tor_0.4.9.6-0+deb13u1.dsc 380ff9b241f08e71fffa43bd6a3061d52a7fb7b6 62184 tor_0.4.9.6-0+deb13u1.diff.gz 9c72c7eed5142759559b3ab0bd75435f278d759d 6792 tor_0.4.9.6-0+deb13u1_source.buildinfo 2932503cda38fe7254e6d666f4b54353a83c6ece 10759319 tor_0.4.9.6.orig.tar.gz Files: b0be3b75354579db88647fcd9e8a5593 1985 net optional tor_0.4.9.6-0+deb13u1.dsc 33cb6fe2df64977821b62e6686548497 62184 net optional tor_0.4.9.6-0+deb13u1.diff.gz 33f5217bd89c0fb6b5986930f33ac05a 6792 net optional tor_0.4.9.6-0+deb13u1_source.buildinfo b37bbcf7cc1ad228e11a38e939a4652e 10759319 net optional tor_0.4.9.6.orig.tar.gz -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEZI5W7zrm8w5X0SHVIw/UyqaI+y8FAmnSGN8ACgkQIw/UyqaI +y8qOQf+KCeTHjc5W2nmzSmncOZvHmb1MqzFxPQfgYLaqKObELE37qCj1eS3XR3c cjwJR1IVgzcjPsVH9w7mYi2i8WPQFn/F3bu7QeN7RUFFonP8ul2aW0i8KXk11w4H ZOwj6bmomfq4xboDLzUX4joWePt2464CvQaptGpvwityVpBi+6vZRORlIeylM2td O5U2Pv3Nr8fe7+efRv6G9aHuTQ0KiGYhOx3AbYb34uWtZvIglbeMZxoADNEBvBcE VIZ/VuQ2vz7rdAEOZFeUu8+5IvncgzExBFlhHKAr361uQsXs6J+hMsos6Hr2d541 GIz2oE5x9ZLXT3zW/jzNSH7veuBBSw== =jg0I -----END PGP SIGNATURE-----