CLSA-2026-1794008495: TuxCare security update for 8 packages (12 CVEs)

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade tuxcare/org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
2. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-core to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
3. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-integration-jca to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
4. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-rt-frontend-jaxrs to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
5. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-rt-rs-security-jose-jaxrs to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
6. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-rt-rs-security-oauth2 to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
7. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-rt-transports-jms to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
8. Upgrade

   Upgrade tuxcare/org.apache.cxf:cxf-rt-wsdl to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2
9. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 3.4.5-tuxcare.2

Event History

Child vulnerabilities

Contains the following vulnerabilities.

• CVE-2026-108039
• CVE-2026-44417
• CVE-2026-44930
• CVE-2026-49875
• CVE-2026-50623
• CVE-2026-50633
• CVE-2026-50634
• CVE-2026-50645
• CVE-2026-57819
• CVE-2026-64958
• CVE-2026-65432
• CVE-2026-78384