Debian alert DSA-6532-1 (tor)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6532-1] tor security update
Date:
             
 
Wed, 30 Sep 2026 17:19:06 +0000
Message-ID:
             
 
<ar1Eij9t9KBsKHBX@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6532-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
September 30, 2026                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : tor
CVE ID         : not yet available

Multiple security vulnerabilities were discovered in Tor, a connection-
based low-latency anonymous communication system, would could result in
denial of service.

For the stable distribution (trixie), this problem has been fixed in
version 0.4.9.13-0+deb13u1.

We recommend that you upgrade your tor packages.

For the detailed security status of tor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Y501
-----END PGP SIGNATURE-----