Updated tor package fixes security vulnerabilities

{
  "id": "2cb877e3f26f725682c8f76268abe8700a7d9ab545fafa5e0406b2e9dd9a5bcd",
  "url": "https://osv.dev/vulnerability/MGASA-2026-0468",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Updated tor package fixes security vulnerabilities",
    "summary": "Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. TROVE-2026-050",
    "evidence": "osv:MGASA-2026-0468",
    "products": [
      {
        "name": {
          "value": "tor",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.4.9.13-1.mga10",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MGASA-2026-0468",
      "aliases": [
        "MGASA-2026-0468"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.4.9.13-1.mga10"
                }
              ]
            }
          ],
          "package": {
            "name": "tor",
            "purl": "pkg:rpm/mageia/tor?arch=source&distro=mageia-10",
            "ecosystem": "Mageia:10"
          },
          "database_specific": {
            "source": "https://advisories.mageia.org/MGASA-2026-0468.json"
          },
          "ecosystem_specific": {
            "section": "core"
          }
        }
      ],
      "modified": "2026-10-06T16:30:03.536685690Z",
      "provider": "osv",
      "references": [
        "https://advisories.mageia.org/MGASA-2026-0468.html",
        "https://bugs.mageia.org/show_bug.cgi?id=36365",
        "https://www.openwall.com/lists/oss-security/2026/09/24/2",
        "https://lists.debian.org/debian-security-announce/2026/msg00445.html"
      ]
    },
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 89315,
  "published_at": "2026-10-06T16:25:00+00:00"
}