CLSA-2026-1793725216: TuxCare security update for 3 packages (1 CVE)
Published Nov 3, 2026
·Updated
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 9.0.46-tuxcare.13.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=9.0.46<9.0.46-tuxcare.13
9.0.46-tuxcare.13
tuxcare/org.apache.tomcat:tomcat>=9.0.46<9.0.46-tuxcare.13
9.0.46-tuxcare.13
tuxcare/org.apache.tomcat:tomcat-catalina>=9.0.46<9.0.46-tuxcare.13
9.0.46-tuxcare.13
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 9.0.46-tuxcare.13 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 9.0.46-tuxcare.13 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-catalinato a version that resolves this vulnerability.Fixed in 9.0.46-tuxcare.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.46-tuxcare.13Patch TuxCare security update
Event History
Nov 3, 2026
Advisory Published
via OSV·06:00 PM
Data Sourced
via OSV·06:00 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which package version contains the fix?
The update is fixed in version 9.0.46-tuxcare.13.
2
Which components were rebuilt as part of this update?
The rebuilt packages are tomcat-embed-core, tomcat, and tomcat-catalina under the TuxCare Apache Tomcat package namespaces.