{"id":"CLSA-2026-1793011786","summary":"TuxCare security update for 33 packages (22 CVEs)","details":"TuxCare rebuilt 33 packages to address 22 CVEs. Fixed in 9.0.13-tuxcare.2.","modified":"2026-10-26T13:30:09.026473804Z","published":"2026-10-26T10:49:46Z","upstream":["CVE-2019-17563","CVE-2020-13935","CVE-2022-23181","CVE-2023-24998","CVE-2023-41080","CVE-2023-42795","CVE-2023-44487","CVE-2024-24549","CVE-2024-38286","CVE-2025-24813","CVE-2025-46701","CVE-2025-48988","CVE-2025-49125","CVE-2025-52434","CVE-2025-52520","CVE-2025-53506","CVE-2025-55668","CVE-2025-55752","CVE-2025-61795","CVE-2025-66614","CVE-2026-24733","CVE-2026-25854"],"affected":[{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"}}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-el","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-el"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-jasper","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"}}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-annotations-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-annotations-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"}}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ant","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ant"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ha","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ha"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-jmx-remote","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"}}},{"package":{"name":"org.apache.tomcat:tomcat-catalina-ws","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina-ws"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-coyote","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-coyote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-dbcp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-dbcp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"}}},{"package":{"name":"org.apache.tomcat:tomcat-el-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-el-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-es","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-es"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-fr","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-fr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"}}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-ja","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-ja"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-i18n-ru","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-i18n-ru"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jasper","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jasper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jasper-el","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jasper-el"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jaspic-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jaspic-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jdbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jni","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jni"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-jsp-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-jsp-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-juli","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-juli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-servlet-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-servlet-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-storeconfig","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-storeconfig"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-tribes","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-tribes"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-util","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-util"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-util-scan","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-util-scan"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json","tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"}}},{"package":{"name":"org.apache.tomcat:tomcat-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"9.0.13-tuxcare.2","base_version":"9.0.13"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}},{"package":{"name":"org.apache.tomcat:tomcat-websocket-api","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-websocket-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.13"},{"fixed":"9.0.13-tuxcare.2"}]}],"versions":["9.0.13","9.0.13-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"9.0.13","fixed_version":"9.0.13-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793011786.json"}}],"schema_version":"1.9.0"}