CLSA-2026-1794480983: TuxCare security update for 3 packages (2 CVEs)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 8.5.46-tuxcare.3.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=8.5.46<8.5.46-tuxcare.3
8.5.46-tuxcare.3
tuxcare/org.apache.tomcat:tomcat>=8.5.46<8.5.46-tuxcare.3
8.5.46-tuxcare.3
tuxcare/org.apache.tomcat:tomcat-coyote>=8.5.46<8.5.46-tuxcare.3
8.5.46-tuxcare.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 8.5.46-tuxcare.3 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 8.5.46-tuxcare.3 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 8.5.46-tuxcare.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.5.46-tuxcare.3
Event History
Nov 12, 2026
Advisory Published
via OSV·11:56 AM
Data Sourced
via OSV·11:56 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which components are covered by this update?
The update covers tuxcare/org.apache.tomcat.embed:tomcat-embed-core, tuxcare/org.apache.tomcat:tomcat, and tuxcare/org.apache.tomcat:tomcat-coyote.
2
What fixed package version should be installed?
The advisory states that the issues are fixed in 8.5.46-tuxcare.3.