Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

openSUSE Leap 16.0 tor Critical Security Fixes for CVE-2026-44597

opensuse
Calendar Grey May 10, 2026
Dist Opensuse Esm H88
This security advisory addresses critical vulnerabilities in tor with installation instructions for openSUSE Leap 16.0.
An update that solves 6 vulnerabilities and has 6 bug fixes can now be installed.

Description

This update for tor fixes the following issues:

Changes in tor:

- Update to 0.4.9.8

* Fix out-of-bounds read (boo#1264341, CVE-2026-44597, TROVE-2026-011)

* Do not attempt or accept BEGIN_DIR via conflux legs

(boo#1264342, CVE-2026-44599,TROVE-2026-008)

* Adjust conflux out-of-order queue accounting when clearing a queue

(boo#1264343, CVE-2026-44600, TROVE-2026-010)

* Fix a client-side crash caused by double-close of a circuit while

under circuit queue memory pressure

(boo#1264344, CVE-2026-44601, TROVE-2026-009)

* Fix null pointer dereference when receiving a CERT cell out of

order (boo#1264345, CVE-2026-44602, TROVE-2026-006)

* Fix off-by-one out-of-bounds read if a malformed BEGIN cell is

received (boo#1264346, CVE-2026-44603, TROVE-2026-007)

- upate to 0.4.9.5:

* first stable release in the 0.4.9 series

* introduces a new circuit-level encryption design for better

client security

* introduce a more scalable way for large relay...

Read the Full Advisory

Patch

Package List

- openSUSE Leap 16.0:

tor-0.4.9.8-bp160.1.1

References

* bsc#1264341

* bsc#1264342

* bsc#1264343

* bsc#1264344

* bsc#1264345

* bsc#1264346

References:

* https://www.suse.com/security/cve/CVE-2026-44597.html

* https://www.suse.com/security/cve/CVE-2026-44599.html

* https://www.suse.com/security/cve/CVE-2026-44600.html

* https://www.suse.com/security/cve/CVE-2026-44601.html

* https://www.suse.com/security/cve/CVE-2026-44602.html

* https://www.suse.com/security/cve/CVE-2026-44603.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20709-1
Rating: critical
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here