CLSA-2026-1794482515: TuxCare security update for 3 packages (1 CVE)
Published Nov 12, 2026
·Updated
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 9.0.13-tuxcare.6.
Affected Software
3 affected componentsFixes available
tuxcare/org.apache.tomcat.embed:tomcat-embed-core>=9.0.13<9.0.13-tuxcare.6
9.0.13-tuxcare.6
tuxcare/org.apache.tomcat:tomcat>=9.0.13<9.0.13-tuxcare.6
9.0.13-tuxcare.6
tuxcare/org.apache.tomcat:tomcat-coyote>=9.0.13<9.0.13-tuxcare.6
9.0.13-tuxcare.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.tomcat.embed:tomcat-embed-coreto a version that resolves this vulnerability.Fixed in 9.0.13-tuxcare.6 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcatto a version that resolves this vulnerability.Fixed in 9.0.13-tuxcare.6 - Upgrade
Upgrade
tuxcare/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 9.0.13-tuxcare.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.13-tuxcare.6
Event History
Nov 12, 2026
Advisory Published
via OSV·12:21 PM
Data Sourced
via OSV·12:21 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which packages need to be updated?
Update tomcat-embed-core, tomcat, and tomcat-coyote from the TuxCare Apache Tomcat packages.
2
What package version includes the fix?
The update is fixed in version 9.0.13-tuxcare.6.