UnratedFix available
Updated arrow, thrift, ceph packages fix security vulnerabilities
Type: advisorySources: OSV
The updated packages fix many security vulnerabilities. Please see the links for additional information.
- Products
- arrow, ceph, thrift
- Affected versions
- Not specified
- Fixed versions
- 0.25.0-1.mga10, 17.0.0-4.1.mga10, 20.2.4-1.1.mga10
- CVEs
- CVE-2026-61373, CVE-2026-66055, CVE-2026-66859, CVE-2026-83632, CVE-2026-85088, CVE-2026-87117, CVE-2026-90440, CVE-2026-94645, CVE-2026-94652, CVE-2026-94656, CVE-2026-94657, CVE-2026-96287, CVE-2026-96292, CVE-2026-96294
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 16:04 UTC · Revision 1
Source evidence
Updated arrow, thrift, ceph packages fix security vulnerabilities
core-osv · Original sourcePublished 28 Oct 2026, 02:10 UTC
The updated packages fix many security vulnerabilities. Please see the links for additional information.
osv:MGASA-2026-0562
arrow
Fixed versions: 17.0.0-4.1.mga10
thrift
Fixed versions: 0.25.0-1.mga10
ceph
Fixed versions: 20.2.4-1.1.mga10
Complete source record
{
"id": "d5158d6828027a83faeae23e9fefbd028074975d2e5ee07907441608f2107e36",
"url": "https://osv.dev/vulnerability/MGASA-2026-0562",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Updated arrow, thrift, ceph packages fix security vulnerabilities",
"summary": "The updated packages fix many security vulnerabilities. Please see the links for additional information.",
"evidence": "osv:MGASA-2026-0562",
"products": [
{
"name": {
"value": "arrow",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "17.0.0-4.1.mga10",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "thrift",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.25.0-1.mga10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ceph",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "20.2.4-1.1.mga10",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "MGASA-2026-0562",
"aliases": [
"MGASA-2026-0562"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "17.0.0-4.1.mga10"
}
]
}
],
"package": {
"name": "arrow",
"purl": "pkg:rpm/mageia/arrow?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0562.json"
},
"ecosystem_specific": {
"section": "core"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.25.0-1.mga10"
}
]
}
],
"package": {
"name": "thrift",
"purl": "pkg:rpm/mageia/thrift?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0562.json"
},
"ecosystem_specific": {
"section": "core"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "20.2.4-1.1.mga10"
}
]
}
],
"package": {
"name": "ceph",
"purl": "pkg:rpm/mageia/ceph?arch=source&distro=mageia-10",
"ecosystem": "Mageia:10"
},
"database_specific": {
"source": "https://advisories.mageia.org/MGASA-2026-0562.json"
},
"ecosystem_specific": {
"section": "core"
}
}
],
"modified": "2026-10-28T02:28:14.856913643Z",
"provider": "osv",
"upstream": [
"CVE-2026-61373",
"CVE-2026-66055",
"CVE-2026-66859",
"CVE-2026-83632",
"CVE-2026-85088",
"CVE-2026-87117",
"CVE-2026-90440",
"CVE-2026-94645",
"CVE-2026-94652",
"CVE-2026-94656",
"CVE-2026-94657",
"CVE-2026-96287",
"CVE-2026-96292",
"CVE-2026-96294"
],
"references": [
"https://advisories.mageia.org/MGASA-2026-0562.html",
"https://bugs.mageia.org/show_bug.cgi?id=36534",
"https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
"https://lists.apache.org/thread/nodwz7gjvogkkh3w1jwbsslk1c7t0727",
"https://lists.apache.org/thread/lpcmo2xjfyfww474xdyyfypkqthk9s14",
"https://lists.apache.org/thread/zjv6hjmhl4tb4l4l1dk4bmc2whxh0lb4",
"https://lists.apache.org/thread/zcgm7lx6037lvgvn87rc1tj3p0zhv371",
"https://lists.apache.org/thread/nxlmlhgsh7fwr4mo1fkhtkw3v266qhcx",
"https://lists.apache.org/thread/s8fjltl6c1pkm7vg9v4qkr89b5b74jbg",
"https://lists.apache.org/thread/lg97w2yvg3c6z06l8m5xs3j3v2m6mvj8",
"https://lists.apache.org/thread/n9rogg2166hl9y4ycq5njpvnxndr8y5o",
"https://lists.apache.org/thread/y05tvpv19ow44j16gtbcy9ht7lb0qjpy",
"https://lists.apache.org/thread/tcg16jr59z5nry066dw7ym60vl25dxt9",
"https://lists.apache.org/thread/p96mokqfy16mnqfyon46mf6g8nr9ghb6",
"https://lists.apache.org/thread/shy1rrm2g383wlbdb2p7w19c868ntdjp",
"https://lists.apache.org/thread/52gwhsy947hj9qhgn0dql726z1q927g4",
"https://lists.apache.org/thread/3wmvtvv56rky5wtszn4zr8w12kg928qn",
"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PJ2VIEPTDKVT3ZHU4YTZOASQWMORN2PV/"
]
},
"related_cves": [
{
"value": "CVE-2026-61373",
"evidence": "/upstream"
},
{
"value": "CVE-2026-66055",
"evidence": "/upstream"
},
{
"value": "CVE-2026-66859",
"evidence": "/upstream"
},
{
"value": "CVE-2026-83632",
"evidence": "/upstream"
},
{
"value": "CVE-2026-85088",
"evidence": "/upstream"
},
{
"value": "CVE-2026-87117",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90440",
"evidence": "/upstream"
},
{
"value": "CVE-2026-94645",
"evidence": "/upstream"
},
{
"value": "CVE-2026-94652",
"evidence": "/upstream"
},
{
"value": "CVE-2026-94656",
"evidence": "/upstream"
},
{
"value": "CVE-2026-94657",
"evidence": "/upstream"
},
{
"value": "CVE-2026-96287",
"evidence": "/upstream"
},
{
"value": "CVE-2026-96292",
"evidence": "/upstream"
},
{
"value": "CVE-2026-96294",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 486919,
"published_at": "2026-10-28T02:10:00+00:00"
}