<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-01T22:28:14.448870+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/bit-thrift-2026-55971</id>
    <title>BIT-thrift-2026-55971 — Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()</title>
    <updated>2026-10-01T22:28:14.473304+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: thrift</p>
<p>Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.</p>
<p>This issue affects Apache Thrift: before 0.24.0.</p>
<p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/bit-thrift-2026-55971"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/fkie_cve-2026-55971</id>
    <title>fkie_cve-2026-55971</title>
    <updated>2026-10-01T22:28:14.473448+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.</p>
<p>This issue affects Apache Thrift: before 0.24.0.</p>
<p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/fkie_cve-2026-55971"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ghsa-gwj4-q93m-wwqc</id>
    <title>GHSA-gwj4-q93m-wwqc</title>
    <updated>2026-10-01T22:28:14.473507+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.</p>
<p>This issue affects Apache Thrift: before 0.24.0.</p>
<p>Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ghsa-gwj4-q93m-wwqc"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1</id>
    <title>openSUSE-SU-2026:11432-1 — libthrift-0_24_0-0.24.0-1.1 on GA media</title>
    <updated>2026-10-01T22:28:14.473540+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libthrift-0_24_0-0.24.0-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/opensuse-su-2026:11432-1"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/rhsa-2026:49715</id>
    <title>RHSA-2026:49715 — Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - thrift</title>
    <updated>2026-10-01T22:28:14.473594+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/rhsa-2026:49715"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55971</id>
    <title>UBUNTU-CVE-2026-55971</title>
    <updated>2026-10-01T22:28:14.473623+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:20.04:LTS: thrift, Ubuntu:22.04:LTS: thrift, Ubuntu:24.04:LTS: thrift, Ubuntu:26.04:LTS: thrift</p>
<p>Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55971"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2629</id>
    <title>WID-SEC-W-2026-2629 — Red Hat Enterprise Linux AI: Schwachstelle ermöglicht Codeausführung</title>
    <updated>2026-10-01T22:28:14.473666+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen und dadurch möglicherweise die vollständige Kontrolle über das betroffene System zu erlangen, Daten zu kompromittieren oder einen Denial-of-Service-Zustand herbeizuführen.</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2629"/>
  </entry>
</feed>
