AZL-106026 CVE-2026-82458 affecting package kata-containers-preview 3.27.0~preview2-2

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

UBUNTU-CVE-2026-94652

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

UBUNTU-CVE-2026-94648

Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

RUSTSEC-2026-0319 anymap2 is unmaintained

The anymap2 crate is not maintained. anymap3 is the recommended replacement...

CLSA-2026-1790941624 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.4-tuxcare.4...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to improper exception handling in the TNonblockingServer. An attacker can disrupt server availability by sending specially crafted requests that trigger unhandled exceptions, resulting in the termination of the...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via the D language bindings. An attacker can cause the application to enter an infinite loop or terminate unexpectedly by sending specially crafted input that triggers an integer underflow or an unhandled exception...

CVE-2026-104432 Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response

Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtaintips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip status. Peers returning only the next block hash cause a zero-length sync sample, making the /ready endpoint return 200 OK...

CVE-2026-85088 Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D — which compares the peer certificate against the...

CVE-2026-85088

The Apache Thrift C++ (0.7.0 through 0.24.0) and D (0.9.0 through 0.24.0) libraries are vulnerable to an improper certificate validation flaw during TLS connections. The default access managers (TSSLSocketFactory in C++ and accessManager in D) fail to reject certificates when subjectAltName dNSNa...

CVE-2026-85088 Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D — which compares the peer certificate against the...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via improper evaluation of the certificate's Common Name during TLS certificate validation when subject alternative name entries do not match the target host. An attacker can intercept or tamper with...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the THeaderTransport. An attacker can cause an application crash by sending specially crafted network traffic that triggers an out-of-bounds memory write. Remediation Upgrade thrift to version 0.25.0 or highe...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling inadequate restriction of memory allocation during input processing. An attacker can exhaust system memory by sending specially crafted requests with excessive size values. Remediatio...

CLSA-2026-1790940570 TuxCare security update for vm2 (1 CVE)

TuxCare rebuilt vm2 to address 1 CVE. Fixed in 3.10.0-tuxcare.3...

UBUNTU-CVE-2026-91135

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

UBUNTU-CVE-2026-93925

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CLSA-2026-1790939353 TuxCare security update for devalue (1 CVE)

TuxCare rebuilt devalue to address 1 CVE. Fixed in 5.9.0-tuxcare.2...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the C GLib bindings. An attacker can cause the application to crash by sending specially crafted input that triggers excessive nested function calls, leading to stack...

Improper Handling of Length Parameter Inconsistency

Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via improper message handling in language bindings. An attacker can cause application crashes or excessive resource consumption by sending specially crafted requests. Remediation Upgra...