RHSA-2026:49715

Vulnerability from csaf_redhat - Published: 2026-08-03 17:02 - Updated: 2026-08-03 22:01
Summary
Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - thrift
Severity
Important
Notes
Topic: AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVE(s) are listed with a severity level of "Important" or higher.
Details: RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and cause a denial of service.

CWE-122 - Heap-based Buffer Overflow
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64
Vendor Fix fix
Workaround
Threats
Impact Important

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The\nCVE(s) are listed with a severity level of \"Important\" or higher.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:49715",
        "url": "https://access.redhat.com/errata/RHSA-2026:49715"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "AIPCC-28714",
        "url": "https://issues.redhat.com/browse/AIPCC-28714"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49715.json"
      }
    ],
    "title": "Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - thrift",
    "tracking": {
      "current_release_date": "2026-08-03T22:01:03+00:00",
      "generator": {
        "date": "2026-08-03T22:01:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2026:49715",
      "initial_release_date": "2026-08-03T17:02:07+00:00",
      "revision_history": [
        {
          "date": "2026-08-03T17:02:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-03T17:02:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-03T22:01:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AI 3.5 for RHEL 9",
                "product": {
                  "name": "Red Hat Enterprise Linux AI 3.5 for RHEL 9",
                  "product_id": "9Base-RHELAI-3.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux_ai:3.5::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux AI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-thrift-0:0.24.0-1.el9ai.noarch",
                "product": {
                  "name": "perl-thrift-0:0.24.0-1.el9ai.noarch",
                  "product_id": "perl-thrift-0:0.24.0-1.el9ai.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-thrift@0.24.0-1.el9ai?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-thrift-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "python3-thrift-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "python3-thrift-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-devel-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-devel-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-glib-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-glib-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-qt-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-qt-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debugsource@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift-debuginfo@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debuginfo@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel-debuginfo@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib-debuginfo@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64",
                "product": {
                  "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_id": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt-debuginfo@0.24.0-1.el9ai?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-thrift-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "python3-thrift-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "python3-thrift-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-devel-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-devel-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-glib-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-glib-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-qt-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-qt-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debugsource@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift-debuginfo@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debuginfo@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel-debuginfo@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib-debuginfo@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
                "product": {
                  "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_id": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt-debuginfo@0.24.0-1.el9ai?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-thrift-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "python3-thrift-0:0.24.0-1.el9ai.s390x",
                  "product_id": "python3-thrift-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-devel-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-devel-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-glib-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-glib-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-qt-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-qt-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debugsource-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-debugsource-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-debugsource-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debugsource@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_id": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift-debuginfo@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debuginfo@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel-debuginfo@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib-debuginfo@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
                "product": {
                  "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_id": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt-debuginfo@0.24.0-1.el9ai?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-thrift-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "python3-thrift-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "python3-thrift-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-devel-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-devel-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-glib-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-glib-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-qt-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-qt-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debugsource@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-thrift-debuginfo@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-debuginfo@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-devel-debuginfo@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-glib-debuginfo@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                "product": {
                  "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_id": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift-qt-debuginfo@0.24.0-1.el9ai?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thrift-0:0.24.0-1.el9ai.src",
                "product": {
                  "name": "thrift-0:0.24.0-1.el9ai.src",
                  "product_id": "thrift-0:0.24.0-1.el9ai.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thrift@0.24.0-1.el9ai?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-thrift-0:0.24.0-1.el9ai.noarch as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch"
        },
        "product_reference": "perl-thrift-0:0.24.0-1.el9ai.noarch",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "python3-thrift-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "python3-thrift-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "python3-thrift-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "python3-thrift-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-0:0.24.0-1.el9ai.src as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src"
        },
        "product_reference": "thrift-0:0.24.0-1.el9ai.src",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debuginfo-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debuginfo-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debuginfo-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debugsource-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debugsource-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debugsource-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-debugsource-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-debugsource-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-devel-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-devel-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-devel-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-devel-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-glib-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-glib-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-glib-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-glib-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-qt-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-qt-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-qt-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-qt-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64"
        },
        "product_reference": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le"
        },
        "product_reference": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x"
        },
        "product_reference": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.5 for RHEL 9",
          "product_id": "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64"
        },
        "product_reference": "thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64",
        "relates_to_product_reference": "9Base-RHELAI-3.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-55971",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-07-27T12:01:58.342437+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507448"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects the C++ implementation of Apache Thrift, specifically the ZLIB-enabled THeaderTransport (THeaderTransport::untransform()), which is reachable when a Thrift client or server negotiates the Header transport protocol with ZLIB compression enabled over a network connection. Red Hat ships the affected C++ package (thrift) in RHEL AI and in the Fedora/EPEL community distributions, and it is also consumed by AIPCC\u0027s PyArrow build pipeline (tracked separately as AIPCC-28667); upgrade to Apache Thrift 0.24.0 or later to remediate.\n\nConfirmed usage in RHEL AI 3.4\u0027s GPU bootc images and in the AIPCC PyArrow build pipeline is limited to PyArrow\u0027s Parquet metadata support, which serializes structs via Thrift\u0027s TCompactProtocol directly to an in-memory buffer and does not invoke THeaderTransport. As a result, this usage does not expose the vulnerable code path to network input; it would require local access to a maliciously crafted Parquet file instead.\n\nOther Red Hat components that reference Apache Thrift via the Go implementation (github.com/apache/thrift) or the Java Maven artifact (org.apache.thrift:libthrift) depend on independently implemented, separately maintained codebases; the Java bindings do not include the vulnerable ZLIB THeaderTransport code path (and CWE-122 heap corruption does not apply to JVM memory-managed arrays) and are therefore not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch",
          "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src",
          "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64",
          "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
          "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
          "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
          "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55971"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507448",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507448"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55971",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55971"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55971",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55971"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xjs36m6kjxpmrmzwck636msg3nvoqnmx",
          "url": "https://lists.apache.org/thread/xjs36m6kjxpmrmzwck636msg3nvoqnmx"
        }
      ],
      "release_date": "2026-07-27T11:11:23.201000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-03T17:02:07+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:49715"
        },
        {
          "category": "workaround",
          "details": "No mitigation is available other than upgrading to Apache Thrift 0.24.0 or later, which contains the fix. AIPCC\u0027s PyArrow build pipeline is tracked separately for remediation under AIPCC-28667.",
          "product_ids": [
            "9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHELAI-3.5:perl-thrift-0:0.24.0-1.el9ai.noarch",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:python3-thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.src",
            "9Base-RHELAI-3.5:thrift-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-debugsource-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-devel-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-glib-debuginfo-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-0:0.24.0-1.el9ai.x86_64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.aarch64",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.ppc64le",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.s390x",
            "9Base-RHELAI-3.5:thrift-qt-debuginfo-0:0.24.0-1.el9ai.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…