[Git][security-tracker-team/security-tracker][master] tor DSA
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Sun Jun 28 15:12:26 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
34c0f161 by Moritz Mühlenhoff at 2026-06-28T16:11:49+02:00
tor DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -65,50 +65,62 @@ CVE-2026-8343
NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/bccd2c7d602d17d6786872a8aa0706855c07e684 (v11.0.2)
CVE-2026-XXXX [TROVE-2026-020]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41270
CVE-2026-XXXX [TROVE-2026-014]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41260
CVE-2026-XXXX [TROVE-2026-018]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41265
CVE-2026-XXXX [TROVE-2026-016]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41262
CVE-2026-XXXX [TROVE-2026-013]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41259
CVE-2026-XXXX [TROVE-2026-015]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41261
CVE-2026-XXXX [TROVE-2026-019]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41267
CVE-2026-XXXX [TROVE-2026-017]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41263
CVE-2026-XXXX [TROVE-2026-022]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41275
CVE-2026-XXXX [TROVE-2026-021]
- tor 0.4.9.9-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41274
CVE-2026-XXXX [TROVE-2026-025]
- tor 0.4.9.11-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41258 (private ATM)
CVE-2026-XXXX [TROVE-2026-026]
- tor 0.4.9.11-1
+ [trixie] - tor 0.4.9.11-0+deb13u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41306
CVE-2026-9242 (The RegistrationMagic \u2013 Custom Registration Forms, User Registrat ...)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[28 Jun 2026] DSA-6372-1 tor - security update
+ [trixie] - tor 0.4.9.11-0+deb13u1
[27 Jun 2026] DSA-6371-1 xorg-server - security update
{CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264}
[trixie] - xorg-server 2:21.1.16-1.3+deb13u3
=====================================
data/dsa-needed.txt
=====================================
@@ -93,9 +93,6 @@ rust-wasmtime
--
shaarli
--
-tor (jmm)
- Maintainer is proposing to rebase trixie and bookworm to 0.4.9.11
---
util-linux (carnil)
Maintainer is preparing updates
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c0f161472330a0e2d05334e131c49f2ff9ecee
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c0f161472330a0e2d05334e131c49f2ff9ecee
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260628/dedb0c02/attachment.htm>
More information about the debian-security-tracker-commits
mailing list