Uploaded image for project: 'MariaDB ColumnStore'
  1. MariaDB ColumnStore
  2. MCOL-6673

Update bundled Apache Thrift to 0.25.0 (SBOM CVE fixes)

    XMLWordPrintable

Details

    • 2026-11

    Description

      Umbrella for upgrading the bundled Apache Thrift library in ColumnStore from 0.24.0 to 0.25.0 (cmake/thrift.cmake), on stable-23.10 and develop-23.02. Resolves the 51 SBOM Thrift CVEs linked below (auto-filed 2026-10-12 against ES 10.6.28-24, 11.4.13-10, 11.8.9-6, 12.3.3-0); all are fixed in Thrift 0.25.0.

      Previous round: MCOL-6513 (0.23.0 -> 0.24.0).

      Note: the findings clear only once the columnstore submodule pointer in the server repo is moved past this bump.

      The linked CVE tickets are to be closed once this is merged.

      Attachments

        Issue Links

          is part of

          Task - A task that needs to be done. MCOL-6615 SBOM vulnerability CVE-2026-91137 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6616 SBOM vulnerability CVE-2026-66081 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6617 SBOM vulnerability CVE-2026-94645 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6618 SBOM vulnerability CVE-2026-94657 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6619 SBOM vulnerability CVE-2026-66859 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6620 SBOM vulnerability CVE-2026-94644 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6621 SBOM vulnerability CVE-2026-96287 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6622 SBOM vulnerability CVE-2026-66055 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6623 SBOM vulnerability CVE-2026-86535 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6624 SBOM vulnerability CVE-2026-93925 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6625 SBOM vulnerability CVE-2026-94637 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6626 SBOM vulnerability CVE-2026-96294 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6627 SBOM vulnerability CVE-2026-82459 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6628 SBOM vulnerability CVE-2026-94636 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6629 SBOM vulnerability CVE-2026-94646 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6630 SBOM vulnerability CVE-2026-94650 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6631 SBOM vulnerability CVE-2026-87117 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6632 SBOM vulnerability CVE-2026-83745 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6633 SBOM vulnerability CVE-2026-61374 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6634 SBOM vulnerability CVE-2026-86537 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6635 SBOM vulnerability CVE-2026-96292 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6636 SBOM vulnerability CVE-2026-94655 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6637 SBOM vulnerability CVE-2026-96990 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6638 SBOM vulnerability CVE-2026-96286 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6639 SBOM vulnerability CVE-2026-94635 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6640 SBOM vulnerability CVE-2026-91135 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6641 SBOM vulnerability CVE-2026-94656 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6642 SBOM vulnerability CVE-2026-94654 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6643 SBOM vulnerability CVE-2026-66858 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6644 SBOM vulnerability CVE-2026-94634 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6645 SBOM vulnerability CVE-2026-94642 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6646 SBOM vulnerability CVE-2026-90440 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6647 SBOM vulnerability CVE-2026-63772 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6648 SBOM vulnerability CVE-2026-85493 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6649 SBOM vulnerability CVE-2026-96277 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6650 SBOM vulnerability CVE-2026-83632 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6651 SBOM vulnerability CVE-2026-85494 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6652 SBOM vulnerability CVE-2026-66837 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6653 SBOM vulnerability CVE-2026-94653 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6654 SBOM vulnerability CVE-2026-94651 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6655 SBOM vulnerability CVE-2026-94639 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6656 SBOM vulnerability CVE-2026-83663 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6657 SBOM vulnerability CVE-2026-94658 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6658 SBOM vulnerability CVE-2026-85476 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6659 SBOM vulnerability CVE-2026-82458 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6660 SBOM vulnerability CVE-2026-96288 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6661 SBOM vulnerability CVE-2026-93926 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6662 SBOM vulnerability CVE-2026-96289 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6663 SBOM vulnerability CVE-2026-94648 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6664 SBOM vulnerability CVE-2026-61373 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MCOL-6665 SBOM vulnerability CVE-2026-94633 (ES)

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              stasusov Stanislav Usov
              stasusov Stanislav Usov
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.