p PatchFirst

PatchFirst · Latest vulnerabilities

libtcnative-2-0 vulnerabilities

Vulnerability published for libtcnative-2-0 in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. SUSE-SU-2026:4658-1

    Not ratedFix available

    Security update for libtcnative-2-0

    This update for libtcnative-2-0 fixes the following issues: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). - CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). Changes for libtcnative-2-0: - Upgrade to version 2.0.16 * Security fixes + Client certificate requirements can be down-graded (bsc#12826

    libtcnative-2-0Operating systems
    • Update to 2.0.16-150400.9.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →