CLSA-2026-1794175349: TuxCare security update for org.wildfly.security (2 CVEs)
Published Nov 8, 2026
·Updated
TuxCare rebuilt 2 org.wildfly.security packages to address 2 CVEs. Fixed in 1.12.1.Final-tuxcare.1.
Affected Software
2 affected componentsFixes available
tuxcare/org.wildfly.security:wildfly-elytron>=1.12.1.Final<1.12.1.Final-tuxcare.1
1.12.1.Final-tuxcare.1
tuxcare/org.wildfly.security:wildfly-elytron-realm-token>=1.12.1.Final<1.12.1.Final-tuxcare.1
1.12.1.Final-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.wildfly.security:wildfly-elytronto a version that resolves this vulnerability.Fixed in 1.12.1.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.wildfly.security:wildfly-elytron-realm-tokento a version that resolves this vulnerability.Fixed in 1.12.1.Final-tuxcare.1 - Upgrade
Upgrade
org.wildfly.securityto a version that resolves this vulnerability.Fixed in 1.12.1.Final-tuxcare.1
Event History
Nov 8, 2026
Advisory Published
via OSV·11:02 PM
Data Sourced
via OSV·11:02 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which packages need to be updated?
Update the TuxCare packages for org.wildfly.security:wildfly-elytron and org.wildfly.security:wildfly-elytron-realm-token. The rebuilt packages fix two CVEs.
2
What fixed package version should be deployed?
Deploy version 1.12.1.Final-tuxcare.1.