#1149224 tor: 10 new high status vulnerabilities including TROVE-2026-051

Package:
tor
Source:
tor
Description:
anonymizing overlay network for TCP
Submitter:
Jeffrey Cliff
Date:
2026-09-28 15:29:02 UTC
Severity:
normal
Tags:
#1149224#5
Date:
2026-09-28 15:27:15 UTC
From:
To:
Dear Maintainer,

according to https://cybernews.com/security/tor-emergency-fixes-adress-high-severity-vulnerabilitiesit
might be worth thinking about these 10 high status tor vulnerabilities
including TROVE-2026-051.that were just reported upstream
in particular
"Today, we released stable version **0.4.9.13** to again address a
series of high-severity security issues and some minor
fixes."https://www.openwall.com/lists/oss-security/2026/09/24/2
[I don't see any bug report for this yet here so here we are]

( note: I bollixed the link and emailed this to
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122517 instead,
which is probably just as well I was going to tag them about it anyway
)