-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 10:18:43 +0200 Source: tor Architecture: source Version: 0.4.9.8-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Peter Palfrader Changed-By: Peter Palfrader Changes: tor (0.4.9.8-0+deb12u1) bookworm-security; urgency=medium . * Upload 0.4.9.8 to debian-security, fixing out-of-bound reads among other things. Consult the upstream changelog for details. * Keep systemd files in /lib (as opposed to /usr/lib) Checksums-Sha1: e6e6802817967f04e4c6b439e16ed18a0252dbef 2000 tor_0.4.9.8-0+deb12u1.dsc b5f9dcee395e248c1778d61ca559074958f2b0ef 10934822 tor_0.4.9.8.orig.tar.gz 5a91ffbbc786fa6a85206cbd4d99a15b0f0e1f89 62282 tor_0.4.9.8-0+deb12u1.diff.gz 78afe296abe10d1cac3c845e6c4ea3a34154b612 7161 tor_0.4.9.8-0+deb12u1_source.buildinfo Checksums-Sha256: 7b1c23c641bc1550bb63e29e310b13b4dee42f2cdcd5654f318bcb848b2b4e13 2000 tor_0.4.9.8-0+deb12u1.dsc ac1f394e2dd2ab0877d27d928fd0d9e86662fe3ca6afdffb9fd9b6f0f96d05de 10934822 tor_0.4.9.8.orig.tar.gz f6ba75b704fe61a80a1b51d52cfff5f7fed0f34cd58dc6ded19fdaf47a2ed5da 62282 tor_0.4.9.8-0+deb12u1.diff.gz fa565cee97afc4b1180156c2bb37471789161ad64f6c4cdacbfb1765cfd8502b 7161 tor_0.4.9.8-0+deb12u1_source.buildinfo Files: e04684f3cae6f90b31dc412485b2f160 2000 net optional tor_0.4.9.8-0+deb12u1.dsc e52aab9722ca579ae16594210f68c777 10934822 net optional tor_0.4.9.8.orig.tar.gz 09f07f1f3b6b67694602b1a92faebc34 62282 net optional tor_0.4.9.8-0+deb12u1.diff.gz bbc4a5bdaffafa095ca333d63f5376be 7161 net optional tor_0.4.9.8-0+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEZI5W7zrm8w5X0SHVIw/UyqaI+y8FAmn/FYUACgkQIw/UyqaI +y9J0Af/ds1rdRfs36R0nXQwiuZJ3iQl6uQwiaOur/Bnu7SJ/ZYl3VaPYEsm0Jfv MT9jtH0rn7R/C6PZWIjbVQ9ef8jHnjeLLtjkmchjxzWeIarTKEUVPQFsv33uOQgl nLgV2hjaJcM6W2G0DRjNuBYqZZNQjBkFC7KIW/S6Vbddlt3MkJ0WQEc4pUgquxJR AUcKGqXIW205hCuU7QXOkInzYNIkzxUD/Mg7HuOP4KmRCCQ1I1er0hdV43srkQa/ ajZVdQ+dUu3N9EG+inQoBVwum5PIPjjdTGEdcmP17vhy+qAN84pEKUiCRRdLGiz8 1lnM3NJNFk/Srgx677uNgouKmmmI3w== =IVAv -----END PGP SIGNATURE-----