MGASA-2026-0489 Updated tor package fixes security vulnerabilities

This update fixes security issues: - Only accept a CONFLUXLINK cell on a plain OR circuit, and refuse to turn a pending conflux leg into an introduction or rendezvous point. Previously a client could link a rendezvous-point circuit into a conflux set and then, with a forged sequence number in the...