Red Hat Security Advisory

RHSA-2026:49837

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images perl-thrift-0.24.0-0.1.hum1@noarch@public-hummingbird-aarch64-rpms, perl-thrift-0.24.0-0.1.hum1@noarch@public-hummingbird-x86_64-rpms, python3-thrift-0.24.0-0.1.hum1@aarch64 +10

Fixes 9 records

TI-2026-40373 CVE-2026-55971 · GHSA-gwj4-q93m-wwqc

Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

MEDIUM 50

Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00979 Published 2026-07-27 Fixed in 0.24.0 CWE-122

TI-2026-40370 CVE-2026-55968 · GHSA-8cj2-994r-9fpq

Apache Thrift: Node.js quadratic-time DoS in server receive transports

MEDIUM 46

Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Fixed in 0.24.0 CWE-407

TI-2026-31935 CVE-2026-43871 · GHSA-8wv5-x4w7-5gww

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

MEDIUM 46

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-835

TI-2026-36362 CVE-2026-49158 · GHSA-jcj7-w43p-gjh8

Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

MEDIUM 41

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Fixed in 0.24.0 CWE-409

TI-2026-30149 CVE-2026-41608 · GHSA-6pjx-3pjc-mrj8

Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

MEDIUM 41

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Fixed in 0.24.0 CWE-409

TI-2026-41778 CVE-2026-58023 · GHSA-7rjc-4234-rgwm

Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

LOW 38

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01017 Published 2026-07-27 Partial fix · 0.24.0 CWE-125

TI-2026-40372 CVE-2026-55970 · GHSA-g7xp-pggm-c7w2

Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()

LOW 38

Buffer Over-read vulnerability in Apache Thrift C++ bindings.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00775 Published 2026-07-27 Partial fix · 0.24.0 CWE-126

TI-2026-32947 CVE-2026-45112 · GHSA-g9fj-fh28-776p

Apache Thrift: Unbounded Read Leading to Denial of Service

LOW 38

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-770

TI-2026-47034 CVE-2026-66053 · GHSA-hwrj-9rr4-24xh

Apache Thrift: Python TSSLSocket Hostname Matcher Import

LOW 26

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00292 Published 2026-07-27 Partial fix · 0.24.0 CWE-297