CLSA-2026-1794229065: TuxCare security update for 3 packages (1 CVE)
Published Nov 9, 2026
·Updated
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 10.1.50-tuxcare.4.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=10.1.50<10.1.50-tuxcare.4
10.1.50-tuxcare.4
tuxcare/org.apache.tomcat:tomcat>=10.1.50<10.1.50-tuxcare.4
10.1.50-tuxcare.4
tuxcare/org.apache.tomcat:tomcat-catalina>=10.1.50<10.1.50-tuxcare.4
10.1.50-tuxcare.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 10.1.50-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 10.1.50-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-catalinato a version that resolves this vulnerability.Fixed in 10.1.50-tuxcare.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.1.50-tuxcare.4
Event History
Nov 9, 2026
Advisory Published
via OSV·01:57 PM
Data Sourced
via OSV·01:57 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which components need to be updated?
The update covers tomcat-embed-core, tomcat, and tomcat-catalina packages from TuxCare.
2
What fixed version should be deployed?
The CVE is fixed in version 10.1.50-tuxcare.4.