CLSA-2026-1794472583: TuxCare security update for 3 packages (1 CVE)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 10.1.16-tuxcare.3.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=10.1.16<10.1.16-tuxcare.3
10.1.16-tuxcare.3
tuxcare/org.apache.tomcat:tomcat>=10.1.16<10.1.16-tuxcare.3
10.1.16-tuxcare.3
tuxcare/org.apache.tomcat:tomcat-catalina>=10.1.16<10.1.16-tuxcare.3
10.1.16-tuxcare.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 10.1.16-tuxcare.3 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 10.1.16-tuxcare.3 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-catalinato a version that resolves this vulnerability.Fixed in 10.1.16-tuxcare.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.1.16-tuxcare.3
Event History
Nov 12, 2026
Advisory Published
via OSV·09:36 AM
Data Sourced
via OSV·09:36 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which components should be updated to remediate this advisory?
Update tuxcare/org.apache.tomcat.embed:tomcat-embed-core, tuxcare/org.apache.tomcat:tomcat, and tuxcare/org.apache.tomcat:tomcat-catalina to 10.1.16-tuxcare.3.