[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for thrift issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4bad7511 by Salvatore Bonaccorso at 2026-05-01T14:55:40+02:00
Add Debian bug reference for thrift issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1325,16 +1325,16 @@ CVE-2026-4805 (The Woostify plugin for WordPress is vulnerable to Stored Cross-S
 CVE-2026-41873 (** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Re ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-41607 (Out-of-bounds Read vulnerability in Apache Thrift.  This issue affects ...)
-	- thrift <unfixed>
+	- thrift <unfixed> (bug #1135348)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/04/28/2
 CVE-2026-41606 (Uncontrolled Recursion vulnerability in Apache Thrift.  This issue aff ...)
-	- thrift <unfixed>
+	- thrift <unfixed> (bug #1135348)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/04/28/3
 CVE-2026-41603 (Improper Validation of Certificate with Host Mismatch vulnerability in ...)
-	- thrift <unfixed>
+	- thrift <unfixed> (bug #1135348)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/04/28/7
 CVE-2026-41602 (Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedT ...)
-	- thrift <unfixed>
+	- thrift <unfixed> (bug #1135348)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/04/28/6
 CVE-2026-41526 (In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safel ...)
 	- kcoreaddons <unfixed> (bug #1135179)
@@ -1382,7 +1382,7 @@ CVE-2025-60889 (Insecure deserialization of untrusted input in StellarGroup HPX
 CVE-2025-60887 (An issue was discovered in Cista v0.15 and below. Insecure deserializa ...)
 	NOT-FOR-US: Cista
 CVE-2025-48431 (Mismatched Memory Management Routines vulnerability in Apache Thrift c ...)
-	- thrift <unfixed>
+	- thrift <unfixed> (bug #1135348)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/04/28/8
 CVE-2025-10539 (Due to improper TLS certificate validation in the DeskTime Time Tracki ...)
 	NOT-FOR-US: DeskTime Time Tracking App



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4bad75118796f5182ae5a7124301261ae4f5de0a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4bad75118796f5182ae5a7124301261ae4f5de0a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260501/3540f583/attachment.htm>