Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
48643714 by Moritz Mühlenhoff at 2026-10-10T21:17:40+02:00
tor DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2270,14 +2270,17 @@ CVE-2026-78663 (The HTTP/2 server can refund
connection-level flow control twice
NOTE: Fixed by:
https://github.com/golang/net/commit/2d03f9dcd22da1be6f645ddfd0541fd94d68e5db
(v0.60.0)
CVE-2026-XXXX [TROVE-2026-062]
- tor 0.4.9.14-1
+ [trixie] - tor 0.4.9.14-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41413
NOTE:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-067]
- tor 0.4.9.14-1
+ [trixie] - tor 0.4.9.14-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41410
NOTE:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-XXXX [TROVE-2026-064]
- tor 0.4.9.14-1
+ [trixie] - tor 0.4.9.14-0+deb13u1
NOTE: https://gitlab.torproject.org/tpo/core/tor/-/work_items/41405
NOTE:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.9/ChangeLog
CVE-2026-97717 (CVE-2026-97717 is a vulnerability in the proxy sub-system of
Secure Ac ...)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[10 Oct 2026] DSA-6551-1 tor - security update
+ [trixie] - tor 0.4.9.14-0+deb13u1
[10 Oct 2026] DSA-6550-1 ghostscript - security update
{CVE-2026-101258 CVE-2026-103226}
[trixie] - ghostscript 10.05.1~dfsg-1+deb13u3
=====================================
data/dsa-needed.txt
=====================================
@@ -182,8 +182,6 @@ tomcat10
--
tomcat11
--
-tor (jmm)
---
valkey (aron)
--
varnish
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48643714b8e969084946f6aeaabaf5e8f448a9fd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48643714b8e969084946f6aeaabaf5e8f448a9fd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
