package/tor: security bump version to 0.4.8.9

Release notes:
https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
https://forum.torproject.org/t/security-release-0-4-8-9/10155

Fixes TROVE-2023-006.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e1741bcdd0654dd68d29f9a43012e87faa00ae3e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

package/tor/tor.hash

@@ -1,4 +1,4 @@
-# From https://dist.torproject.org/tor-0.4.8.8.tar.gz.sha256sum
-sha256  21bbe908cafeabff04636d26293540aa9366eb1cf389bc65dc2476c93e688004  tor-0.4.8.8.tar.gz
+# From https://dist.torproject.org/tor-0.4.8.9.tar.gz.sha256sum
+sha256  59bb7d8890f6131b4ce5344f3dcea5deb2182b7f4f10ff0cb4e4d81f11b2cf65  tor-0.4.8.9.tar.gz
 # Locally computed
 sha256  47b54ed17e8fdcab3c44729a1789a09b208f9a63a845a7e50def9df729eebad0  LICENSE

package/tor/tor.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-TOR_VERSION = 0.4.8.8
+TOR_VERSION = 0.4.8.9
 TOR_SITE = https://dist.torproject.org
 TOR_LICENSE = BSD-3-Clause
 TOR_LICENSE_FILES = LICENSE