CLSA-2026-1794478805: TuxCare security update for 3 packages (1 CVE)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 8.5.78-tuxcare.5.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=8.5.78<8.5.78-tuxcare.5
8.5.78-tuxcare.5
tuxcare/org.apache.tomcat:tomcat>=8.5.78<8.5.78-tuxcare.5
8.5.78-tuxcare.5
tuxcare/org.apache.tomcat:tomcat-coyote>=8.5.78<8.5.78-tuxcare.5
8.5.78-tuxcare.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 8.5.78-tuxcare.5 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 8.5.78-tuxcare.5 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 8.5.78-tuxcare.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.5.78-tuxcare.5
Event History
Nov 12, 2026
Advisory Published
via OSV·11:20 AM
Data Sourced
via OSV·11:20 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which components are affected by this update?
The update covers tomcat-embed-core, tomcat, and tomcat-coyote in the tuxcare/org.apache.tomcat package namespace.