{"id":"CLSA-2026-1786540164","summary":"TuxCare security update for org.apache.avro (1 CVE)","details":"TuxCare rebuilt 23 org.apache.avro packages to address 1 CVE. Fixed in 1.10.2-tuxcare.4.","modified":"2026-08-12T18:45:03.090945759Z","published":"2026-08-12T13:09:24Z","upstream":["CVE-2025-33042"],"affected":[{"package":{"name":"org.apache.avro:avro","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-archetypes-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-archetypes-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-codegen-test","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-codegen-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-compiler","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-compiler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-grpc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-grpc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-integration-test","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-integration-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-ipc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-ipc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-ipc-jetty","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-ipc-jetty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-ipc-netty","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-ipc-netty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-mapred","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-mapred"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-maven-plugin","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-maven-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-perf","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-perf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-protobuf","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-protobuf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-service-archetype","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-service-archetype"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-test-custom-conversions","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-test-custom-conversions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-thrift","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-thrift"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-tools","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:avro-toplevel","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/avro-toplevel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:trevni-avro","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-avro"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:trevni-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:trevni-doc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}},{"package":{"name":"org.apache.avro:trevni-java","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.avro/trevni-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786540164.json"}}],"schema_version":"1.9.0"}