portage-ng / portage / dev-python / thrift / 0.24.0
version « ‹ 0.24.0 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference dev-python/thrift · none place version 0.24.0 in a vulnerable range
▸ GLSA 202107-32 Apache Thrift: Multiple vulnerabilities this version unaffected low remote 2021-07-14

Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition.

Announced
2021-07-14
Revised
2021-07-14
Access
remote
Bugs
#761409 #770145
Advisory
https://security.gentoo.org/glsa/202107-32

Affected packages

PackageArchVulnerableUnaffected
dev-python/thrift*< 0.14.1>= 0.14.1

Background

Apache Thrift is a software framework that combines a software stack with a code generation engine to build services that work efficiently and seamlessly between many languages.

Description

Multiple vulnerabilities have been discovered in Apache Thrift. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Apache Thrift users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-python/thrift-0.14.1"

References