CLSA-2026-1793133237: TuxCare security update for org.springframework.amqp (1 CVE)

The update rebuilds spring-amqp, spring-rabbit, and spring-rabbit-test packages from org.springframework.amqp.

The CVE is fixed in version 2.3.7-tuxcare.5.

Published Oct 27, 2026

Updated

TuxCare rebuilt 3 org.springframework.amqp packages to address 1 CVE. Fixed in 2.3.7-tuxcare.5.

Affected Software

3 affected componentsFixes available

tuxcare/org.springframework.amqp:spring-amqp>=2.3.7<2.3.7-tuxcare.5

2.3.7-tuxcare.5

tuxcare/org.springframework.amqp:spring-rabbit>=2.3.7<2.3.7-tuxcare.5

2.3.7-tuxcare.5

tuxcare/org.springframework.amqp:spring-rabbit-test>=2.3.7<2.3.7-tuxcare.5

2.3.7-tuxcare.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.amqp:spring-amqp to a version that resolves this vulnerability.
Fixed in 2.3.7-tuxcare.5
Upgrade
Upgrade tuxcare/org.springframework.amqp:spring-rabbit to a version that resolves this vulnerability.
Fixed in 2.3.7-tuxcare.5
Upgrade
Upgrade tuxcare/org.springframework.amqp:spring-rabbit-test to a version that resolves this vulnerability.
Fixed in 2.3.7-tuxcare.5
Upgrade
Upgrade org.springframework.amqp to a version that resolves this vulnerability.
Fixed in 2.3.7-tuxcare.5

Oct 27, 2026

Advisory Published

via OSV·08:33 PM

Data Sourced

via OSV·08:33 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update rebuilds spring-amqp, spring-rabbit, and spring-rabbit-test packages from org.springframework.amqp.

The CVE is fixed in version 2.3.7-tuxcare.5.