{"id":"CLSA-2026-1793861217","summary":"TuxCare security update for 6 packages (9 CVEs)","details":"TuxCare rebuilt 6 packages to address 9 CVEs. Fixed in 9.0.39-tuxcare.3.","modified":"2026-11-05T13:15:05.086514908Z","published":"2026-11-05T07:46:58Z","upstream":["CVE-2021-24122","CVE-2023-46589","CVE-2024-23672","CVE-2024-54677","CVE-2024-56337","CVE-2025-31651","CVE-2026-43512","CVE-2026-43515","CVE-2026-65905"],"affected":[{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"tuxcare":{"base_version":"9.0.39","fixed_version":"9.0.39-tuxcare.3"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json"}},{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"tuxcare":{"fixed_version":"9.0.39-tuxcare.3","base_version":"9.0.39"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json"}},{"package":{"name":"org.apache.tomcat:tomcat","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"tuxcare":{"fixed_version":"9.0.39-tuxcare.3","base_version":"9.0.39"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json"}},{"package":{"name":"org.apache.tomcat:tomcat-catalina","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-catalina"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"tuxcare":{"base_version":"9.0.39","fixed_version":"9.0.39-tuxcare.3"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json"}},{"package":{"name":"org.apache.tomcat:tomcat-coyote","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-coyote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"tuxcare":{"fixed_version":"9.0.39-tuxcare.3","base_version":"9.0.39"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json"}},{"package":{"name":"org.apache.tomcat:tomcat-websocket","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.apache.tomcat/tomcat-websocket"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.39"},{"fixed":"9.0.39-tuxcare.3"}]}],"versions":["9.0.39","9.0.39-tuxcare.1","9.0.39-tuxcare.2"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793861217.json","tuxcare":{"base_version":"9.0.39","fixed_version":"9.0.39-tuxcare.3"}}}],"schema_version":"1.9.2"}