[Git][security-tracker-team/security-tracker][master] Reserve DLA-4656-1 for tor
Santiago R.R. (@santiago)
santiago at debian.org
Sun Jun 28 21:31:43 BST 2026
Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker
Commits:
52f145b8 by Santiago Ruano Rincón at 2026-06-28T17:31:18-03:00
Reserve DLA-4656-1 for tor
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -119,61 +119,73 @@ CVE-2026-8343
CVE-2026-XXXX [TROVE-2026-020]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41270
CVE-2026-XXXX [TROVE-2026-014]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41260
CVE-2026-XXXX [TROVE-2026-018]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41265
CVE-2026-XXXX [TROVE-2026-016]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41262
CVE-2026-XXXX [TROVE-2026-013]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41259
CVE-2026-XXXX [TROVE-2026-015]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41261
CVE-2026-XXXX [TROVE-2026-019]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41267
CVE-2026-XXXX [TROVE-2026-017]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41263
CVE-2026-XXXX [TROVE-2026-022]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41275
CVE-2026-XXXX [TROVE-2026-021]
- tor 0.4.9.9-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41274
CVE-2026-XXXX [TROVE-2026-025]
- tor 0.4.9.11-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41258 (private ATM)
CVE-2026-XXXX [TROVE-2026-026]
- tor 0.4.9.11-1
[trixie] - tor 0.4.9.11-0+deb13u1
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[bullseye] - tor <end-of-life> (see DSA 5562)
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41306
CVE-2026-9242 (The RegistrationMagic \u2013 Custom Registration Forms, User Registrat ...)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,5 @@
+[28 Jun 2026] DLA-4656-1 tor - security update
+ [bookworm] - tor 0.4.9.11-0+deb12u1
[28 Jun 2026] DLA-4655-1 libhtml-parser-perl - security update
{CVE-2026-8829}
[bullseye] - libhtml-parser-perl 3.75-1+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -659,9 +659,6 @@ sympa/bookworm
NOTE: 20250119: Added by Security Team (jmm)
NOTE: 20260611: bookworm LTS handover.
--
-tor/bookworm
- NOTE: 20260627: Maintainer uploaded fix, will sync up for release of DLA
---
trafficserver/bullseye
NOTE: 20241120: Added by Front-Desk (Beuc)
NOTE: 20241120: Upcoming DSA (Beuc/front-desk)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52f145b8ed96a8999e12206d5d9c1d36be9f684c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52f145b8ed96a8999e12206d5d9c1d36be9f684c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260628/4d962158/attachment.htm>
More information about the debian-security-tracker-commits
mailing list