[Git][security-tracker-team/security-tracker][master] Add batch of thift issues (need assessment for built bindings)
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 2 21:03:34 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d7ff6200 by Salvatore Bonaccorso at 2026-10-02T22:02:36+02:00
Add batch of thift issues (need assessment for built bindings)
Just adding the first batch of new thift issues, but this need
sassessment which of the bindings are built and which are not provided
in a binary package.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,7 +15,8 @@ CVE-2026-97338 (The Download Manager plugin for WordPress is vulnerable to Store
CVE-2026-97336 (The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scrip ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96990 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/hrgcqlms4ksrz4qkqdjwoxxggdty7dgh
CVE-2026-96940 (Weak authorization in Microsoft Exchange Server allows an authenticate ...)
NOT-FOR-US: Microsoft
CVE-2026-96871 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
@@ -31,19 +32,26 @@ CVE-2026-96567 (The MW WP Form plugin for WordPress is vulnerable to Stored Cros
CVE-2026-96566 (The Newsletter \u2013 Send awesome emails from WordPress plugin for Wo ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96294 (Uncaught exception, Improper Handling of Exceptional Conditions vulner ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/52gwhsy947hj9qhgn0dql726z1q927g4
CVE-2026-96292 (Inefficient regular expression complexity, Inefficient Algorithmic Com ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/3wmvtvv56rky5wtszn4zr8w12kg928qn
CVE-2026-96289 (Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/kv1zkwlt82lkkv20g29txr5pjnvo0pf8
CVE-2026-96288 (Uncontrolled Recursion, Allocation of resources without limits or thro ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/vxnk7cmdtoqjn97b8szlqym1mxx0xtzb
CVE-2026-96287 (Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/tcg16jr59z5nry066dw7ym60vl25dxt9
CVE-2026-96286 (Uncaught exception vulnerability in Apache Thrift Perl bindings. Th ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/o5386v7ytbbjv9sx7dbszw46ypod5yd9
CVE-2026-96277 (Uncaught exception, Improper Handling of Exceptional Conditions vulner ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/k1t5r9sz7k5tn57cnf5khw2ywlxv6098
CVE-2026-95817 (The DoFollow Case by Case plugin for WordPress is vulnerable to Stored ...)
NOT-FOR-US: WordPress plugin
CVE-2026-95670 (The No External Links plugin for WordPress is vulnerable to Stored Cro ...)
@@ -55,47 +63,68 @@ CVE-2026-95512 (A flaw was found in FreeType, specifically within its CID font l
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2462295
NOTE: Fixed by: https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9
CVE-2026-94658 (Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/hv6b1nyk2p15gy5pmtprwo7z9m46mfcx
CVE-2026-94657 (Allocation of resources without limits or throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/lpcmo2xjfyfww474xdyyfypkqthk9s14
CVE-2026-94656 (Allocation of resources without limits or throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/lg97w2yvg3c6z06l8m5xs3j3v2m6mvj8
CVE-2026-94655 (Allocation of resources without limits or throttling, Inefficient Algo ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/wdjyf4y115ybgdzz5m3gspo97lcmz1dt
CVE-2026-94654 (Loop with unreachable exit condition ('infinite loop') vulnerability i ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/kx3xdttoypl8j4dcxmqbq9dwy1w0kr7j
CVE-2026-94653 (Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/8zbv1y4wzr3nn5mzmdph7b0n6tm0lc4m
CVE-2026-94652 (Missing release of memory after effective lifetime vulnerability in Ap ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/nodwz7gjvogkkh3w1jwbsslk1c7t0727
CVE-2026-94651 (improper handling of exceptional conditions, Missing release of resour ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/rflzpdvtk8yhpzg99wkf5yf277nn7267
CVE-2026-94650 (Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/poskkt3p754b2f293g63934hw160o86j
CVE-2026-94648 (Allocation of resources without limits or throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/f9w4q6ttlc3k9404x4do25gdhqodtjnn
CVE-2026-94646 (Uncaught exception, Improper validation of specified quantity in input ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/5hjh0gz8wf6bo7ydxjpqj92m42hwmfo8
CVE-2026-94645 (Improper validation of specified quantity in input, Allocation of reso ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/p96mokqfy16mnqfyon46mf6g8nr9ghb6
CVE-2026-94644 (Allocation of resources without limits or throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/8y04vvxw7ozxxh3c44vhoy7jsd6bonzq
CVE-2026-94642 (Uncaught exception vulnerability in Apache Thrift PHP bindings. Thi ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/5tjwbbyympbj16lblocv9b12s32sg113
CVE-2026-94639 (improper handling of exceptional conditions, Allocation of resources w ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/5okpz47dv8hy0s3r6tmrplg3y7jzhhyw
CVE-2026-94638 (Allocation of resources without limits or throttling vulnerability in ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/v60w786pqr7njzz9425grby8yjrgmbsj
CVE-2026-94637 (Improper handling of highly compressed data (data amplification) vulne ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/6hxll1jcnod9gfr225tz7my08lpj3jmt
CVE-2026-94636 (Improper handling of highly compressed data (data amplification), Func ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/1rpq0d0g6yzjjzl1z27lwmvhzkn6rbrs
CVE-2026-94635 (Allocation of resources without limits or throttling, Improper handlin ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/ow8994gb5g8ssmmbkbl48xqb0tpvqyr3
CVE-2026-94634 (Allocation of resources without limits or throttling, Initialization o ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/dgy8ox9t4bh1xhf74ovf29ht87x7dno4
CVE-2026-94633 (Memory allocation with excessive size value, Improper handling of leng ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE: https://lists.apache.org/thread/cxkbblyht7988p2o6yvnmd6536qmt88k
CVE-2026-94544 (Next.js is a React framework for building full-stack web applications. ...)
NOT-FOR-US: Next.js
CVE-2026-94543 (Next.js is a React framework for building full-stack web applications. ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ff62005acd76577e0cec8f1bf552c8b8363a9a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ff62005acd76577e0cec8f1bf552c8b8363a9a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/f00473ca/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list