{"id":"CLSA-2026-1792686134","summary":"TuxCare security update for 33 packages (9 CVEs)","details":"TuxCare rebuilt 33 packages to address 9 CVEs. Fixed in 9.0.13-tuxcare.1.","modified":"2026-10-22T19:45:02.700783893Z","published":"2026-10-22T16:22:14Z","upstream":["CVE-2019-0221","CVE-2019-12418","CVE-2020-1938","CVE-2020-9484","CVE-2021-24122","CVE-2021-33037","CVE-2023-28708","CVE-2025-48989","CVE-2026-29146"],"affected":[{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-el","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-el"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-jasper","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"}}},{"package":{"name":"org.apache.tomcat:tomcat-annotations-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-annotations-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ant","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ant"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ha","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ha"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-jmx-remote","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ws","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ws"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat:tomcat-coyote","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-coyote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat:tomcat-dbcp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-dbcp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-el-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-el-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-es","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-es"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-fr","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-fr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-ja","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-ja"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-ru","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-ru"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jasper","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jasper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jasper-el","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jasper-el"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jaspic-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jaspic-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jni","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jni"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jsp-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jsp-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat:tomcat-juli","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-juli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"}}},{"package":{"name":"org.apache.tomcat:tomcat-servlet-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-servlet-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-storeconfig","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-storeconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.1","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-tribes","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-tribes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"}}},{"package":{"name":"org.apache.tomcat:tomcat-util","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-util"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-util-scan","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-util-scan"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}},{"package":{"name":"org.apache.tomcat:tomcat-websocket-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-websocket-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.1"}]}],"versions":["9.0.13"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792686134.json"}}],"schema_version":"1.9.0"}