Punt autoconf267->autoconf2686abd00a86b
Port details
devel/thrift0.22.0,1
Framework for scalable cross-language services development
- Maintainer
- ports@FreeBSD.org
- Packages
- thrift 0.22.0,1
- Upstream
- Higher version available: 0.25.0
- CPE
apache:thriftfrom the port- WWW
- https://thrift.apache.org/
- Links
- cgit · VuXML
Unaddressed (25) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 0.24.0 would fix 25 of 25 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 0.23.0 10 · 0.24.0 25
| CVE-2026-55971 | 9.3 | 2026-07-27 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.… |
| CVE-2026-48144 | 9.1 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomm… |
| CVE-2026-58662 | 8.7 | 2026-07-27 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Us… |
| CVE-2026-58389 | 8.7 | 2026-07-27 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommend… |
| CVE-2026-55968 | 8.7 | 2026-07-27 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings. This issue affects Apache Thri… |
| CVE-2026-55969 | 8.7 | 2026-07-27 | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users… |
| CVE-2026-43871 | 8.7 | 2026-07-27 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. … |
| CVE-2026-48586 | 8.7 | 2026-07-27 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thr… |
| CVE-2026-41636 | 8.7 | 2026-04-28 | Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.2… |
| CVE-2026-48145 | 8.2 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommend… |
| CVE-2026-41604 | 8.2 | 2026-04-28 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the… |
| CVE-2026-49158 | 7.5 | 2026-07-27 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users a… |
| CVE-2026-41608 | 7.5 | 2026-07-27 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users… |
| CVE-2026-41602 | 7.5 | 2026-04-28 | Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are re… |
| CVE-2025-48431 | 7.5 | 2026-04-28 | Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended t… |
| CVE-2026-43870 | 7.3 | 2026-05-05 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP… |
| CVE-2026-43869 | 7.3 | 2026-05-05 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade… |
| CVE-2026-41605 | 7.3 | 2026-04-28 | Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, whi… |
| CVE-2026-58023 | 6.9 | 2026-07-27 | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0,… |
| CVE-2026-55970 | 6.9 | 2026-07-27 | Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, whic… |
Show all 25
| CVE-2026-45112 | 6.9 | 2026-07-27 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: from 0.19.0 before 0.24.0. Users a… |
| CVE-2026-41607 | 6.5 | 2026-04-28 | Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the… |
| CVE-2026-66053 | 5.9 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomm… |
| CVE-2026-43868 | 5.3 | 2026-05-05 | Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to versio… |
| CVE-2026-41606 | 5.3 | 2026-04-28 | Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (69)
Round one migration of ports from automake{19,110} to automake1117e80cde328Autotools update. Read ports/UPDATING 20100915 for details. Approved by: portmgr (for Mk/bsd.port.mk part) Tested by: Multiple -exp runs8262a7b51d
Add patch for issue THRIFT-817. WWW: https://issues.apache.org/jira/browse/THRIFT-81746c6e83dc7
Update to 0.3.0d8c90b59c5
Update libevent to 1.4.14b PR: ports/147723 Approved by: maintainer (timeout)39b68bb4fe
Update to 0.2.0cc31c91465
- Mark MAKE_JOBS_UNSAFE Reported by: pointyhated9c0642a6
Mark as broken on sparc64: does not compile. Hat: portmgr642676a5fa
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr789d75c728
- Update boost to 1.39 - Split boost port to separate components, with boost-all metaport PR: ports/137054 Submitted by: Alexander Churanov <churanov.port.maintainer@gmail.com> (maintainer)d1107bb40e
Document in Makefile what state of language support is. Add a warning post-install that you should always use the same compiler version when building C++ proxy/stub code against the Thrift libraries. Add a pointer post-install to white paper which used to be installed with port.a9fc811a52
Update Thrift port to SVN rev 787160 of Apache Incubator source. The original Facebook release of Thrift is 2 years old. No feedback from maintainer yet (~2 days).918e8aad8a
- Remove conditional checks for FreeBSD 5.x and olderd095d4a965
- Update libevent dependency and bump PORTREVISION907d5d1a39
- Bump PORTREVISION since devel/libevent are updated.5265c7a798
Remove lang/gcc40 which only has three dependencies left in the tree (all of which only have it as a minimal requirement and also build with lang/gcc42) and has issues on at least 8-CURRENT. Approved by: portmgr (pav)bdfbcd5303
- Mark BROKEN on 5.X: incorrect plist Reported by: pointyhat461e42c1cc
Add thrift 20070917, framework for scalable cross-language services development.25c40d09d1