CLSA-2026-1794667422: TuxCare security update for undici (6 CVEs)

Q: Which package version includes the fixes?

The six CVE fixes are included in undici version 6.23.0-tuxcare.1.

Q: How can I determine whether a system is affected?

Check the installed TuxCare undici package version. Systems running a version earlier than 6.23.0-tuxcare.1 have not received the rebuilt package identified in this update.

Published Nov 14, 2026

Updated

TuxCare rebuilt undici to address 6 CVEs. Fixed in 6.23.0-tuxcare.1.

Affected Software

1 affected componentFixes available

tuxcare/undici>=6.23.0-tuxcare.0<6.23.0-tuxcare.1

6.23.0-tuxcare.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/undici to a version that resolves this vulnerability.
Fixed in 6.23.0-tuxcare.1
Upgrade
Upgrade undici to a version that resolves this vulnerability.
Fixed in 6.23.0-tuxcare.1

Event History

Nov 14, 2026

Advisory Published

via OSV·03:43 PM

Data Sourced

via OSV·03:43 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which package version includes the fixes?

The six CVE fixes are included in undici version 6.23.0-tuxcare.1.

How can I determine whether a system is affected?

Check the installed TuxCare undici package version. Systems running a version earlier than 6.23.0-tuxcare.1 have not received the rebuilt package identified in this update.

CLSA-2026-1794667422: TuxCare security update for undici (6 CVEs)

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which package version includes the fixes?

How can I determine whether a system is affected?

Company

Resources

Contact

Frequently Asked Questions

Which package version includes the fixes?

How can I determine whether a system is affected?