CLSA-2026-1794475124: TuxCare security update for 2 packages (1 CVE)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 7.0.70-tuxcare.8.
Affected Software
2 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=7.0.70<7.0.70-tuxcare.8
7.0.70-tuxcare.8
tuxcare/org.apache.tomcat:tomcat-coyote>=7.0.70<7.0.70-tuxcare.8
7.0.70-tuxcare.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 7.0.70-tuxcare.8 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 7.0.70-tuxcare.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.70-tuxcare.8
Event History
Nov 12, 2026
Advisory Published
via OSV·10:18 AM
Data Sourced
via OSV·10:18 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which components need to be checked for this update?
Check whether your environment includes tuxcare/org.apache.tomcat.embed:tomcat-embed-core or tuxcare/org.apache.tomcat:tomcat-coyote. The update rebuilt both packages to address the CVE.
2
What package version contains the fix?
The fix is available in version 7.0.70-tuxcare.8.