CLSA-2026-1794008495

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1794008495
Upstream
CVE (12)
Published
2026-11-07T00:41:36Z
Modified
2026-11-07T07:15:03Z
Summary
TuxCare security update for 8 packages (12 CVEs)
Details

TuxCare rebuilt 8 packages to address 12 CVEs. Fixed in 3.4.5-tuxcare.2.

Affected packages

TuxCare:Maven
org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap

Package

Name
org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap
Purl
pkg:maven/org.apache.cxf.services.xkms/cxf-services-xkms-x509-repo-ldap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-core

Package

Name
org.apache.cxf:cxf-core
Purl
pkg:maven/org.apache.cxf/cxf-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-integration-jca

Package

Name
org.apache.cxf:cxf-integration-jca
Purl
pkg:maven/org.apache.cxf/cxf-integration-jca

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-rt-frontend-jaxrs

Package

Name
org.apache.cxf:cxf-rt-frontend-jaxrs
Purl
pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-rt-rs-security-jose-jaxrs

Package

Name
org.apache.cxf:cxf-rt-rs-security-jose-jaxrs
Purl
pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-rt-rs-security-oauth2

Package

Name
org.apache.cxf:cxf-rt-rs-security-oauth2
Purl
pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-rt-transports-jms

Package

Name
org.apache.cxf:cxf-rt-transports-jms
Purl
pkg:maven/org.apache.cxf/cxf-rt-transports-jms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}
org.apache.cxf:cxf-rt-wsdl

Package

Name
org.apache.cxf:cxf-rt-wsdl
Purl
pkg:maven/org.apache.cxf/cxf-rt-wsdl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.5
Fixed
3.4.5-tuxcare.2

Affected versions

3.*
3.4.5
3.4.5-tuxcare.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794008495.json"
tuxcare 
{
    "base_version": "3.4.5",
    "fixed_version": "3.4.5-tuxcare.2"
}