CLSA-2026-1789457514 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 9 io.undertow packages to address 1 CVE. Fixed in 2.0.26.Final-tuxcare.1...

CLSA-2026-1789456491 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.3.17.Final-tuxcare.2...

CLSA-2026-1789372923 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 7 io.undertow packages to address 1 CVE. Fixed in 1.4.27.Final-tuxcare.1...

CLSA-2026-1788890118 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.3.18.Final-tuxcare.3...

CLSA-2026-1787137111 TuxCare security update for io.undertow (6 CVEs)

TuxCare rebuilt 8 io.undertow packages to address 6 CVEs. Fixed in 2.2.24.Final-tuxcare.1...

CLSA-2026-1786429829 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.6...

CLSA-2026-1786429714 TuxCare security update for io.undertow (3 CVEs)

TuxCare rebuilt 8 io.undertow packages to address 3 CVEs. Fixed in 2.3.17.Final-tuxcare.1...

PT-2026-80071

TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.6...

PT-2026-80070

TuxCare rebuilt 8 io.undertow packages to address 3 CVEs. Fixed in 2.3.17.Final-tuxcare.1...

Denial Of Service (DoS)

io.undertow, undertow-core is vulnerable to Denial of Service DoS. The vulnerability is due to an OutOfMemory error caused by a malicious user sending crafted requests through the FormAuthenticationMechanism, allowing an attacker to trigger the error...

Denial Of Service (DoS)

io.undertow: undertow-core is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of URL-encoded request paths for concurrent requests on the ajp-listener, which can cause the wrong path to be processed, potentially leading to Denial Of Service DoS...