[Git][security-tracker-team/security-tracker][master] tor DSA
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Sep 30 18:17:28 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
52a21ae0 by Moritz Mühlenhoff at 2026-09-30T19:17:05+02:00
tor DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2793,40 +2793,50 @@ CVE-2025-71422 (Contrast is a Kubernetes runtime for confidential containers. In
NOT-FOR-US: Contrast
CVE-2026-XXXX [TROVE-2026-051]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41381
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-050]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41380
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-052]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41369
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-030]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41360
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-038]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-041]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-056]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41398
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-058]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41408
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-012]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41256
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-053]
- tor 0.4.9.13-1 (bug #1122517; bug #1149224)
+ [trixie] - tor 0.4.9.13-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41368
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-95510 [use of uninitialized struct sigaction]
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[30 Sep 2026] DSA-6532-1 tor - security update
+ [trixie] - tor 0.4.9.13-0+deb13u1
[30 Sep 2026] DSA-6531-1 openssl - security update
{CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84784}
[trixie] - openssl 3.5.7-1~deb13u3
=====================================
data/dsa-needed.txt
=====================================
@@ -174,8 +174,6 @@ tomcat10
--
tomcat11
--
-tor (jmm)
---
valkey (aron)
--
varnish
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52a21ae0352e074946fe7bb6ccd239b2181685de
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52a21ae0352e074946fe7bb6ccd239b2181685de
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/ee76640a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list