Package: tor X-Debbugs-Cc: Debian Security Team <[email protected]> Version: 0.4.9.11-1 Severity: important Tags: security
Dear Maintainer, according to https://cybernews.com/security/tor-emergency-fixes-adress-high-severity-vulnerabilitiesit might be worth thinking about these 10 high status tor vulnerabilities including TROVE-2026-051.that were just reported upstream in particular "Today, we released stable version **0.4.9.13** to again address a series of high-severity security issues and some minor fixes."https://www.openwall.com/lists/oss-security/2026/09/24/2 [I don't see any bug report for this yet here so here we are] ( note: I bollixed the link and emailed this to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122517 instead, which is probably just as well I was going to tag them about it anyway ) -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux 7 (freia/ceres) Release: 7 Codename: freia ceres Architecture: x86_64 Kernel: Linux 7.1.7+deb14-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_CPU_OUT_OF_SPEC Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en Shell: /bin/sh linked to /usr/bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages tor depends on: ii adduser 3.158 ii libc6 2.43-3 ii libcap2 1:2.78-1 ii libelogind-compat [libsystemd0] 257.13-1 ii libevent-2.1-7t64 2.1.13-stable-1 ii liblzma5 5.8.3-1 ii libseccomp2 2.6.1-1 ii libssl3t64 3.6.3-1 ii libzstd1 1.5.7+dfsg-4 ii lsb-base 11.6 ii runit-helper 2.16.7 ii sysvinit-utils [lsb-base] 3.18-1devuan1 ii zlib1g 1:1.3.dfsg+really1.3.2-3 Versions of packages tor recommends: ii logrotate 3.22.0-1 ii tor-geoipdb 0.4.9.11-1 ii torsocks 2.5.0-6 Versions of packages tor suggests: pn apparmor-utils <none> pn mixmaster <none> pn nyx <none> ii obfs4proxy 0.0.14-2+b7 ii socat 1.8.1.3-2 pn torbrowser-launcher <none> -- Configuration Files: /etc/tor/torrc changed [not included] -- no debconf information
