[Git][security-tracker-team/security-tracker][master] Add second more specific bug for the new tor issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Sep 29 06:37:12 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cb5c28be by Salvatore Bonaccorso at 2026-09-29T07:36:02+02:00
Add second more specific bug for the new tor issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -917,41 +917,41 @@ CVE-2025-71423 (Edgelesssys Contrast is a confidential-computing runtime for Kub
 CVE-2025-71422 (Contrast is a Kubernetes runtime for confidential containers. In versi ...)
 	NOT-FOR-US: Contrast
 CVE-2026-XXXX [TROVE-2026-051]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41381
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-050]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41380
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-052]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41369
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-030]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41360
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-038]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-041]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-056]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41398
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-058]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41408
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-012]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41256
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-XXXX [TROVE-2026-053]
-	- tor 0.4.9.13-1 (bug #1122517)
+	- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41368
 	NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
 CVE-2026-95510 [use of uninitialized struct sigaction]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb5c28bec4f403c554c0691237f62aa6c1517701

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb5c28bec4f403c554c0691237f62aa6c1517701
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/ccc8ed8a/attachment.htm>


More information about the debian-security-tracker-commits mailing list