-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 10:18:43 +0200
Source: tor
Binary: tor tor-dbgsym
Architecture: amd64
Version: 0.4.9.8-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Peter Palfrader <weasel@debian.org>
Description:
 tor        - anonymizing overlay network for TCP
Changes:
 tor (0.4.9.8-0+deb12u1) bookworm-security; urgency=medium
 .
   * Upload 0.4.9.8 to debian-security, fixing out-of-bound reads among
     other things. Consult the upstream changelog for details.
   * Keep systemd files in /lib (as opposed to /usr/lib)
Checksums-Sha1:
 ec129e0f9ed13e64d348bf26303ff2a23b0ef117 5880804 tor-dbgsym_0.4.9.8-0+deb12u1_amd64.deb
 794ee34eb55e8e4c19fc3712433ad78597ce886d 7927 tor_0.4.9.8-0+deb12u1_amd64-buildd.buildinfo
 c0e428e6f206edaa5b1f816b7716fe05866b8878 2083864 tor_0.4.9.8-0+deb12u1_amd64.deb
Checksums-Sha256:
 087b17a1852c7db85462e972893c1447afbed54c19997a370c4fdec884a46614 5880804 tor-dbgsym_0.4.9.8-0+deb12u1_amd64.deb
 71a3ba2c85c47bae87be39b21be7181740b23bc90dfe4a8ffb4108a52cc59bb9 7927 tor_0.4.9.8-0+deb12u1_amd64-buildd.buildinfo
 00a66051dfe055dfee59f1ab2aca4eead3053511beee701fd9e502bf2a801e6b 2083864 tor_0.4.9.8-0+deb12u1_amd64.deb
Files:
 7f8f83f4f8305a3c30ffe38b32819e4e 5880804 debug optional tor-dbgsym_0.4.9.8-0+deb12u1_amd64.deb
 b2e6363b2413b96030252fc88b0d9644 7927 net optional tor_0.4.9.8-0+deb12u1_amd64-buildd.buildinfo
 1818f8538b00de12ec2c6f9f2b6b3282 2083864 net optional tor_0.4.9.8-0+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=hVvl
-----END PGP SIGNATURE-----