CLSA-2026-1790970528 TuxCare security update for org.springframework (27 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 27 CVEs. Fixed in 5.0.19.RELEASE-tuxcare.1...

CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leadin...

CLSA-2026-1790966173 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.5...

CLSA-2026-1790965371 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.0-tuxcare.1...

CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)

TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...

CLSA-2026-1790965158 TuxCare security update for browserslist (1 CVE)

TuxCare rebuilt browserslist to address 1 CVE. Fixed in 2.11.3-tuxcare.3...

CLSA-2026-1790963499 TuxCare security update for tar-fs (3 CVEs)

TuxCare rebuilt tar-fs to address 3 CVEs. Fixed in 2.1.1-tuxcare.1...

CLSA-2026-1790958488 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.7.16-tuxcare.2...

CLSA-2026-1790952864 TuxCare security update for org.springframework (13 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 13 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.6...

CLSA-2026-1790952166 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 6 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.5...

CLSA-2026-1790951905 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.7.16-tuxcare.2...

CLSA-2026-1790950461 TuxCare security update for terser (1 CVE)

TuxCare rebuilt terser to address 1 CVE. Fixed in 4.8.0-tuxcare.1...

CLSA-2026-1790950178 TuxCare security update for browserslist (1 CVE)

TuxCare rebuilt browserslist to address 1 CVE. Fixed in 3.2.8-tuxcare.2...

DEBIAN-CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-94657

Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-105947 CVE-2026-83632 affecting package thrift 0.24.0-1

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

AZL-105950 CVE-2026-66858 affecting package thrift 0.24.0-1

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

AZL-106590 CVE-2026-66859 affecting package thrift 0.24.0-1

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

UBUNTU-CVE-2026-83632

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...