CLSA-2026-1793864180: TuxCare security update for com.google.guava:guava (1 CVE)
Published Nov 5, 2026
·Updated
TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 12.0.1-tuxcare.2.
Affected Software
1 affected componentFixes available
tuxcare/com.google.guava:guava>=12.0.1<12.0.1-tuxcare.2
12.0.1-tuxcare.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/com.google.guava:guavato a version that resolves this vulnerability.Fixed in 12.0.1-tuxcare.2 - Upgrade
Upgrade
com.google.guava:guavato a version that resolves this vulnerability.Fixed in 12.0.1-tuxcare.2
Event History
Nov 5, 2026
Advisory Published
via OSV·08:36 AM
Data Sourced
via OSV·08:36 AM
DescriptionAffected Software
Frequently Asked Questions
1
What version should be deployed to remediate this update?
Deploy com.google.guava:guava version 12.0.1-tuxcare.2, which is identified as the fixed build.
2
How can I verify whether the update has been applied?
Check the deployed com.google.guava:guava package version. Systems running 12.0.1-tuxcare.2 have the stated fix; the advisory does not provide affected version ranges.