StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · tor

`tor` CVE matrix across Linux distros

330 CVEs tracked across 8 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2005-2050→ fixed in0.0.9.10-1
CVE-2005-2643→ fixed in0.1.0.14-1
CVE-2006-0414→ fixed in0.1.1.11-alpha-1
CVE-2006-3407→ fixed in0.1.1.20-1
CVE-2006-3408→ fixed in0.1.1.20-1
CVE-2006-3409→ fixed in0.1.1.20-1
CVE-2006-3410→ fixed in0.1.1.20-1
CVE-2006-3411→ fixed in0.1.1.20-1
+59 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tor

Debian bookworm

Source: Debian

CVE-2005-2050→ fixed in0.0.9.10-1
CVE-2005-2643→ fixed in0.1.0.14-1
CVE-2006-0414→ fixed in0.1.1.11-alpha-1
CVE-2006-3407→ fixed in0.1.1.20-1
CVE-2006-3408→ fixed in0.1.1.20-1
CVE-2006-3409→ fixed in0.1.1.20-1
CVE-2006-3410→ fixed in0.1.1.20-1
CVE-2006-3411→ fixed in0.1.1.20-1
+59 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tor

Debian trixie

Source: Debian

CVE-2005-2050→ fixed in0.0.9.10-1
CVE-2005-2643→ fixed in0.1.0.14-1
CVE-2006-0414→ fixed in0.1.1.11-alpha-1
CVE-2006-3407→ fixed in0.1.1.20-1
CVE-2006-3408→ fixed in0.1.1.20-1
CVE-2006-3409→ fixed in0.1.1.20-1
CVE-2006-3410→ fixed in0.1.1.20-1
CVE-2006-3411→ fixed in0.1.1.20-1
+58 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y tor

Is YOUR tor patched?

5-second check on your actual server. The quickscan reads your installed tor version and matches against the same 330-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)