Debian alert DSA-6372-1 (tor)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6372-1] tor security update
Date:
             
 
Sun, 28 Jun 2026 14:13:51 +0000
Message-ID:
             
 
<akEsH507QBU3w7uk@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6372-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 28, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : tor
CVE ID         : not yet available

Multiple security vulnerabilities were discovered in Tor, a connection-
based low-latency anonymous communication system, would could result in
denial of service.

For the stable distribution (trixie), this problem has been fixed in
version 0.4.9.11-0+deb13u1.

We recommend that you upgrade your tor packages.

For the detailed security status of tor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=dj4I
-----END PGP SIGNATURE-----