[Git][security-tracker-team/security-tracker][master] new tor issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
663d1c3a by Moritz Muehlenhoff at 2026-06-27T22:43:25+02:00
new tor issues

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,51 @@
+CVE-2026-XXXX [TROVE-2026-020]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41270
+CVE-2026-XXXX [TROVE-2026-014]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41260
+CVE-2026-XXXX [TROVE-2026-018]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41265
+CVE-2026-XXXX [TROVE-2026-016]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41262
+CVE-2026-XXXX [TROVE-2026-013]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41259
+CVE-2026-XXXX [TROVE-2026-015]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41261
+CVE-2026-XXXX [TROVE-2026-019]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41267
+CVE-2026-XXXX [TROVE-2026-017]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41263
+CVE-2026-XXXX [TROVE-2026-022]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41275
+CVE-2026-XXXX [TROVE-2026-021]
+	- tor 0.4.9.9-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41274
+CVE-2026-XXXX [TROVE-2026-025]
+	- tor 0.4.9.11-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41258 (private ATM)
+CVE-2026-XXXX [TROVE-2026-026]
+	- tor 0.4.9.11-1
+	[bullseye] - tor <end-of-life> (see DSA 5562)
+	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41306
 CVE-2026-9242 (The RegistrationMagic \u2013 Custom Registration Forms, User Registrat ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-9233 (The Quiz and Survey Master (QSM) \u2013 Easy Quiz and Survey Maker plu ...)


=====================================
data/dla-needed.txt
=====================================
@@ -663,6 +663,9 @@ sympa/bookworm
   NOTE: 20250119: Added by Security Team (jmm)
   NOTE: 20260611: bookworm LTS handover.
 --
+tor/bookworm
+  NOTE: 20260627: Maintainer uploaded fix, will sync up for release of DLA
+--
 trafficserver/bullseye
   NOTE: 20241120: Added by Front-Desk (Beuc)
   NOTE: 20241120: Upcoming DSA (Beuc/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/663d1c3a7fc50684e20e5d693de24a0800984f9d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/663d1c3a7fc50684e20e5d693de24a0800984f9d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260627/0168925f/attachment.htm>