CLSA-2026-1793728400: TuxCare security update for 3 packages (2 CVEs)
Published Nov 3, 2026
·Updated
TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 10.1.55-tuxcare.2.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=10.1.55<10.1.55-tuxcare.2
10.1.55-tuxcare.2
tuxcare/org.apache.tomcat:tomcat-coyote>=10.1.55<10.1.55-tuxcare.2
10.1.55-tuxcare.2
tuxcare/org.apache.tomcat:tomcat-util>=10.1.55<10.1.55-tuxcare.2
10.1.55-tuxcare.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 10.1.55-tuxcare.2 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 10.1.55-tuxcare.2 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-utilto a version that resolves this vulnerability.Fixed in 10.1.55-tuxcare.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.1.55-tuxcare.2
Event History
Nov 3, 2026
Advisory Published
via OSV·06:53 PM
Data Sourced
via OSV·06:53 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which components need to be updated?
The update covers tomcat-embed-core, tomcat-coyote, and tomcat-util packages in the TuxCare Apache Tomcat distribution.
2
What version contains the fixes?
The two CVE fixes are included in version 10.1.55-tuxcare.2.