Updated tor packages fix security vulnerabilities

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control stateCVE-2026-87724 Do not purge memory for OOM from within low-level code TROVE-2026-043. A hostile...

MGASA-2026-0392 Updated tor packages fix security vulnerabilities

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control stateCVE-2026-87724 Do not purge memory for OOM from within low-level code TROVE-2026-043. A hostile...