{"id":"CLSA-2026-1778633128","summary":"TuxCare security update for org.apache.avro (3 CVEs)","details":"TuxCare rebuilt 16 org.apache.avro packages to address 3 CVEs. Fixed in 1.7.6-tuxcare.1.","modified":"2026-08-07T10:01:10.446120400Z","published":"2026-08-04T14:52:31Z","upstream":["CVE-2021-43045","CVE-2023-39410","CVE-2024-47561"],"affected":[{"package":{"name":"org.apache.avro:avro","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-archetypes-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-archetypes-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-compiler","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-compiler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-ipc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-ipc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-mapred","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-mapred"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-maven-plugin","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-maven-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-protobuf","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-protobuf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-service-archetype","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-service-archetype"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-thrift","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-thrift"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-tools","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:avro-toplevel","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-toplevel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:trevni-avro","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-avro"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:trevni-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:trevni-doc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}},{"package":{"name":"org.apache.avro:trevni-java","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778633128.json"}}],"schema_version":"1.8.0"}