CLSA-2026-1793384138: TuxCare security update for 3 packages (4 CVEs)
Published Oct 30, 2026
·Updated
TuxCare rebuilt 3 packages to address 4 CVEs. Fixed in 9.0.75-tuxcare.7.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=9.0.75<9.0.75-tuxcare.7
9.0.75-tuxcare.7
tuxcare/org.apache.tomcat:tomcat>=9.0.75<9.0.75-tuxcare.7
9.0.75-tuxcare.7
tuxcare/org.apache.tomcat:tomcat-catalina>=9.0.75<9.0.75-tuxcare.7
9.0.75-tuxcare.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 9.0.75-tuxcare.7 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 9.0.75-tuxcare.7 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-catalinato a version that resolves this vulnerability.Fixed in 9.0.75-tuxcare.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.75-tuxcare.7
Event History
Oct 30, 2026
Advisory Published
via OSV·07:15 PM
Data Sourced
via OSV·07:15 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which package version contains the fixes?
The security update is fixed in version 9.0.75-tuxcare.7.
2
Which components were rebuilt as part of this update?
The update rebuilt tomcat-embed-core, tomcat, and tomcat-catalina packages from the TuxCare Apache Tomcat packages.
3
How many CVEs does this update address?
The update addresses four CVEs.