{
  "schema_version": "1.7.0",
  "id": "MGASA-2026-0562",
  "published": "2026-10-28T02:10:00Z",
  "modified": "2026-10-28T01:53:10Z",
  "summary": "Updated arrow, thrift, ceph packages fix security vulnerabilities",
  "details": "The updated packages fix many security vulnerabilities. Please see the\nlinks for additional information.\n",
  "upstream": [
    "CVE-2026-94652",
    "CVE-2026-94657",
    "CVE-2026-83632",
    "CVE-2026-85088",
    "CVE-2026-66055",
    "CVE-2026-90440",
    "CVE-2026-94656",
    "CVE-2026-66859",
    "CVE-2026-87117",
    "CVE-2026-96287",
    "CVE-2026-94645",
    "CVE-2026-61373",
    "CVE-2026-96294",
    "CVE-2026-96292"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2026-0562.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=36534"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/nodwz7gjvogkkh3w1jwbsslk1c7t0727"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/lpcmo2xjfyfww474xdyyfypkqthk9s14"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/zjv6hjmhl4tb4l4l1dk4bmc2whxh0lb4"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/zcgm7lx6037lvgvn87rc1tj3p0zhv371"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/nxlmlhgsh7fwr4mo1fkhtkw3v266qhcx"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/s8fjltl6c1pkm7vg9v4qkr89b5b74jbg"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/lg97w2yvg3c6z06l8m5xs3j3v2m6mvj8"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/n9rogg2166hl9y4ycq5njpvnxndr8y5o"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/y05tvpv19ow44j16gtbcy9ht7lb0qjpy"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/tcg16jr59z5nry066dw7ym60vl25dxt9"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/p96mokqfy16mnqfyon46mf6g8nr9ghb6"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/shy1rrm2g383wlbdb2p7w19c868ntdjp"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/52gwhsy947hj9qhgn0dql726z1q927g4"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/3wmvtvv56rky5wtszn4zr8w12kg928qn"
    },
    {
      "type": "WEB",
      "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PJ2VIEPTDKVT3ZHU4YTZOASQWMORN2PV/"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "arrow",
        "purl": "pkg:rpm/mageia/arrow?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.0.0-4.1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "thrift",
        "purl": "pkg:rpm/mageia/thrift?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.25.0-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "ceph",
        "purl": "pkg:rpm/mageia/ceph?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20.2.4-1.1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}