Vulnerabilitymedium
Apache Thrift 0.25.0: 61 CVEs fixed (combined announcement)
AI summary · grok-4.7Summaries by Vani AI
Apache Thrift 0.25.0 fixes 61 vulnerabilities; users should upgrade from all earlier versions.
Jens Geyer announced that Apache Thrift 0.25.0, released 30 September 2026, fixes 61 vulnerabilities. All issues affect Apache Thrift before 0.25.0, and users are recommended to upgrade. Each flaw was separately announced on 1 October 2026; this oss-security post replaces those 61 individual messages. The excerpt does not state active exploitation.
Key facts
- Apache Thrift 0.25.0 was released on 30 September 2026.
- The release fixes 61 vulnerabilities affecting all earlier versions.
- Users are advised to upgrade to 0.25.0.
- Individual issues were announced on 1 October 2026; this post consolidates them.
- Vendors
- Apache Software Foundation
- Products
- Apache Thrift
- Organizations
- Apache Software Foundation
From the original article
Posted by Jens Geyer on Oct 04 Apache Thrift 0. 25. 0 was released on 30 September 2026: https://lists.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.