CLSA-2026-1794182179: TuxCare security update for 3 packages (3 CVEs)
TuxCare rebuilt 3 packages to address 3 CVEs. Fixed in 10.0.26-tuxcare.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.eclipse.jetty.http2:http2-commonto a version that resolves this vulnerability.Fixed in 10.0.26-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.eclipse.jetty:jetty-serverto a version that resolves this vulnerability.Fixed in 10.0.26-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.eclipse.jetty:jetty-webappto a version that resolves this vulnerability.Fixed in 10.0.26-tuxcare.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26-tuxcare.4
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which components need to be updated?
Update the TuxCare builds of org.eclipse.jetty.http2:http2-common, org.eclipse.jetty:jetty-server, and org.eclipse.jetty:jetty-webapp. The fixes are included in version 10.0.26-tuxcare.4.
How many CVEs does this update address?
The update addresses three CVEs across the three rebuilt packages.