tocsin

Debian/tor: critical 9.1

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.

Action: Upgrade tor to 0.4.9.8-1 or later.

Affected

introducedfixedlast affected
00.4.9.8-1-

Fixed versions

0.4.9.8-1

Sources

published · modified · JSON