MGASA-2026-0468
Updated tor package fixes security vulnerabilities
Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. TROVE-2026-050
What each source reports
OSV No score
Updated tor package fixes security vulnerabilities
Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. TROVE-2026-051. Avoid cacheing DNS PTR responses when DNS caching is disabled. Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. TROVE-2026-050
- Record
MGASA-2026-0468- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
torMageia:10 |
before 0.4.9.13-1.mga10 | 0.4.9.13-1.mga10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2026-0468 is a vulnerability with no CVSS score yet in tor, published October 6, 2026. No source lists public exploit code. Fixed in tor 0.4.9.13-1.mga10.