CLSA-2026-1773965924

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1773965924.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1773965924
Upstream
CVE (4)
Published
2026-08-04T14:52:13Z
Modified
2026-10-15T09:46:19Z
Summary
TuxCare security update for org.apache.thrift (4 CVEs)
Details

TuxCare rebuilt 2 org.apache.thrift packages to address 4 CVEs. Fixed in 0.9.3-tuxcare.3.

Affected packages

TuxCare:Maven / org.apache.thrift:libfb303

Package

Name
org.apache.thrift:libfb303
Purl
pkg:maven/org.apache.thrift/libfb303

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.9.3
Fixed
0.9.3-tuxcare.3

Affected versions

0.*
0.9.3
0.9.3.tuxcare.1
0.9.3-tuxcare.2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1773965924.json"
tuxcare 
{
    "base_version":  "0.9.3",
    "fixed_version":  "0.9.3-tuxcare.3"
}

TuxCare:Maven / org.apache.thrift:libthrift

Package

Name
org.apache.thrift:libthrift
Purl
pkg:maven/org.apache.thrift/libthrift

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.9.3
Fixed
0.9.3-tuxcare.3

Affected versions

0.*
0.9.3
0.9.3.tuxcare.1
0.9.3-tuxcare.2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1773965924.json"
tuxcare 
{
    "base_version":  "0.9.3",
    "fixed_version":  "0.9.3-tuxcare.3"
}