Advisories » MGASA-2026-0468

Updated tor package fixes security vulnerabilities

Publication date: 06 Oct 2026
Modification date: 06 Oct 2026
Type: security
Affected Mageia releases : 10

Description

Avoid a set of possible memory corruption, double-free, and null
pointer dereference bugs that could occur with some reverse DNS
virtual address configurations. TROVE-2026-051.
Avoid cacheing DNS PTR responses when DNS caching is disabled.
Previous code to prevent this caching parsed the response
addresses incorrectly, and defaulted to caching when the address
could not be parsed. TROVE-2026-050
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36365
• https://www.openwall.com/lists/oss-security/2026/09/24/2
• https://lists.debian.org/debian-security-announce/2026/msg00445.html

SRPMS

10/core

• tor-0.4.9.13-1.mga10