CLSA-2026-1793729384: TuxCare security update for 3 packages (3 CVEs)
Published Nov 3, 2026
·Updated
TuxCare rebuilt 3 packages to address 3 CVEs. Fixed in 9.0.50-tuxcare.17.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=9.0.50<9.0.50-tuxcare.17
9.0.50-tuxcare.17
tuxcare/org.apache.tomcat:tomcat>=9.0.50<9.0.50-tuxcare.17
9.0.50-tuxcare.17
tuxcare/org.apache.tomcat:tomcat-catalina>=9.0.50<9.0.50-tuxcare.17
9.0.50-tuxcare.17
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 9.0.50-tuxcare.17 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 9.0.50-tuxcare.17 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-catalinato a version that resolves this vulnerability.Fixed in 9.0.50-tuxcare.17 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.50-tuxcare.17
Event History
Nov 3, 2026
Advisory Published
via OSV·07:09 PM
Data Sourced
via OSV·07:09 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which components need to be updated?
The update covers tuxcare/org.apache.tomcat.embed:tomcat-embed-core, tuxcare/org.apache.tomcat:tomcat, and tuxcare/org.apache.tomcat:tomcat-catalina.
2
What version contains the fixes?
The three CVE fixes are included in 9.0.50-tuxcare.17.