You are viewing a plain text version of this content. The canonical link for it is here.
- [VOTE] Apache Thrift 0.24.0-rc0 release candidate - posted by Jens Geyer <je...@apache.org> on 2026/07/05 21:33:19 UTC, 4 replies.
- [RESULT][VOTE] Apache Thrift 0.24.0-rc0 release candidate - posted by Jens Geyer <je...@apache.org> on 2026/07/11 15:50:53 UTC, 0 replies.
- [ANNOUNCE] Apache Thrift 0.24.0 released - posted by Jens Geyer <je...@apache.org> on 2026/07/11 16:24:04 UTC, 0 replies.
- CVE-2026-43871: Apache Thrift: TCompactProtocol varint byte-count limit - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:03 UTC, 0 replies.
- CVE-2026-45112: Apache Thrift: Unbounded Read Leading to Denial of Service - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:09 UTC, 0 replies.
- CVE-2026-48144: Apache Thrift: c_glib TLS Client Missing Hostname Verification - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:19 UTC, 0 replies.
- CVE-2026-48145: Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:42 UTC, 0 replies.
- CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:50 UTC, 0 replies.
- CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:42:58 UTC, 0 replies.
- CVE-2026-55968: Apache Thrift: Node.js quadratic-time DoS in server receive transports - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:07 UTC, 0 replies.
- CVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:14 UTC, 0 replies.
- CVE-2026-55970: Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:22 UTC, 0 replies.
- CVE-2026-55971: Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:30 UTC, 0 replies.
- CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:38 UTC, 0 replies.
- CVE-2026-58389: Apache Thrift: Rust binary protocol non-strict path missing string size limit - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:47 UTC, 0 replies.
- CVE-2026-58662: Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:43:54 UTC, 0 replies.
- CVE-2026-66053: Apache Thrift: Python TSSLSocket Hostname Matcher Import - posted by Jens Geyer <je...@apache.org> on 2026/07/24 21:44:01 UTC, 0 replies.
- Please publish Apache Thrift 0.24.0 release on the website - posted by Dmytro Shteflyuk <kp...@kpumuk.info> on 2026/07/30 01:28:08 UTC, 0 replies.