[Git][security-tracker-team/security-tracker][master] tor DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48643714 by Moritz Mühlenhoff at 2026-10-10T21:17:40+02:00
tor DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2270,14 +2270,17 @@ CVE-2026-78663 (The HTTP/2 server can refund connection-level flow control twice
 	NOTE: Fixed by: https://github.com/golang/net/commit/2d03f9dcd22da1be6f645ddfd0541fd94d68e5db (v0.60.0)
 CVE-2026-XXXX [TROVE-2026-062]
 	- tor 0.4.9.14-1
+	[trixie] - tor 0.4.9.14-0+deb13u1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41413
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-067]
 	- tor 0.4.9.14-1
+	[trixie] - tor 0.4.9.14-0+deb13u1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41410
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-064]
 	- tor 0.4.9.14-1
+	[trixie] - tor 0.4.9.14-0+deb13u1
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41405
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-97717 (CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Ac ...)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[10 Oct 2026] DSA-6551-1 tor - security update
+	[trixie] - tor 0.4.9.14-0+deb13u1
 [10 Oct 2026] DSA-6550-1 ghostscript - security update
 	{CVE-2026-101258 CVE-2026-103226}
 	[trixie] - ghostscript 10.05.1~dfsg-1+deb13u3


=====================================
data/dsa-needed.txt
=====================================
@@ -182,8 +182,6 @@ tomcat10
 --
 tomcat11
 --
-tor (jmm)
---
 valkey (aron)
 --
 varnish



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48643714b8e969084946f6aeaabaf5e8f448a9fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48643714b8e969084946f6aeaabaf5e8f448a9fd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/83bdf8e4/attachment-0001.htm>