CVE-2026-86243

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

DoS via TLS handshake. (CVE-2026-86243) Insecure OpenSSL options enabled. (CVE-2026-86246) Client certificate requirements can be down-graded. (CVE-2026-86247)

These are all security issues fixed in the libtcnative-1-0-1.3.9-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libtcnative-2-0-2.0.16-1.1 package on the GA media of openSUSE Tumbleweed.

This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues:

Security issues fixed:

• CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631).
• CVE-2026-75973: improper authentication when Jakarta authentication is configured with SimpleAuthConfigProvider (bsc#1282630).
• CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
• CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
• CVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers (bsc#1282599).
• CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627).
• CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626).
• CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625).
• CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).
• CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620).
• CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).
• CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with (bsc#1282581).

Non security issue fixed:

• package libtcnative-1-0-devel houses link to libtcnative-1.so instead of package libtcnative-1-0 (bsc#622430).

Changes for libtcnative-1-0:

• Update to 1.3.9

• Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4
• Fix: Fix a potential crash when negotiating ALPN
• If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client
• Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int)
• Code: Remove unused code
• Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections
• Fix: Fix a potential crash when configuring raw certificates
• Fix: Avoid a potential crash with very long ALPN protocol names
• Fix: Make the call to a CertificateVerifier more robust
• Fix: Avoid a potential crash when processing OCSP URLs
• Fix: Make the processing of OCSP responses more robust
• Fix: Stricter OCSP handling when soft-fail is disabled
• Fix: Harden against the mis-use of Buffer.address(ByteBuffer)
• Fix: Harden against the mis-use of Pool.destroy(long)
• Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of…

This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues:

Security issues fixed:

• CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631).
• CVE-2026-75973: improper authentication when Jakarta authentication is configured with SimpleAuthConfigProvider (bsc#1282630).
• CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
• CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
• CVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers (bsc#1282599).
• CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627).
• CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626).
• CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625).
• CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).
• CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620).
• CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).
• CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with (bsc#1282581).

Non security issue fixed:

• package libtcnative-1-0-devel houses link to libtcnative-1.so instead of package libtcnative-1-0 (bsc#622430).

Changes for libtcnative-1-0:

• Update to 1.3.9

• Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4
• Fix: Fix a potential crash when negotiating ALPN
• If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client
• Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int)
• Code: Remove unused code
• Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections
• Fix: Fix a potential crash when configuring raw certificates
• Fix: Avoid a potential crash with very long ALPN protocol names
• Fix: Make the call to a CertificateVerifier more robust
• Fix: Avoid a potential crash when processing OCSP URLs
• Fix: Make the processing of OCSP responses more robust
• Fix: Stricter OCSP handling when soft-fail is disabled
• Fix: Harden against the mis-use of Buffer.address(ByteBuffer)
• Fix: Harden against the mis-use of Pool.destroy(long)
• Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of…

This update for libtcnative-1-0, tomcat11 fixes the following issues:

Security issues fixed:

libtcnative-1-0:

• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).

tomcat11:

• CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631).
• CVE-2026-75973: improper authentication when Jakarta authentication is configured with SimpleAuthConfigProvider (bsc#1282630).
• CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
• CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
• CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599).
• CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627).
• CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626).
• CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625).
• CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
• CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620).
• CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).
• CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581).

Changes for libtcnative-1-0:

• Update to 1.3.9

• Security fixes

• Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations.
• Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.
• DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash.

• Changes

• Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4
• Fix: Fix a potential crash when negotiating ALPN
• If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client
• Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int)
• Code: Remove unused code
• Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections
• Fix: Fix a potential crash when configuring raw certificates
• Fix: Avoid a potential crash with very long ALPN protocol names
• Fix: Make the call to a CertificateVerifier more robust +…

This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues:

Security issues fixed:

libtcnative-1-0:

• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).

tomcat,tomcat10:

• CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631).
• CVE-2026-75973: improper authentication when Jakarta authentication is configured with SimpleAuthConfigProvider (bsc#1282630).
• CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
• CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
• CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599).
• CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627).
• CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626).
• CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625).
• CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
• CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620).
• CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).
• CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581).

Changes for libtcnative-1-0:

• Update to 1.3.9

• Security fixes

• Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations.
• Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.
• DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash.

• Changes

• Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4
• Fix: Fix a potential crash when negotiating ALPN
• If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client
• Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int)
• Code: Remove unused code
• Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections
• Fix: Fix a potential crash when configuring raw certificates
• Fix: Avoid a potential crash with very long ALPN protocol names
• Fix: Make the call to a…

This update for libtcnative-2-0 fixes the following issues:

• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).

Changes for libtcnative-2-0:

• Upgrade to version 2.0.16

• Security fixes

• Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations.
• Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.
• DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash.

• Changes

• Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4
• Update: Remove support for Windows build on IA64 architecture (Itanium)
• Update: Make x64 the default architecture for Windows build
• Update: Make Windows 10 / 11 the default target version for Windows builds
• Fix: Fix a potential crash when negotiating ALPN
• Fix: If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client
• Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int)
• Code: Remove unused code
• Fix: Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections
• Fix: Fix a potential crash when configuring raw certificates
• Fix: Avoid a potential crash with very long ALPN protocol names
• Fix: Make the call to a CertificateVerifier more robust
• Fix: Avoid a potential crash when processing OCSP URLs
• Fix: Make the processing of OCSP responses more robust
• Fix: Stricter OCSP handling when soft-fail is disabled
• Fix: Harden against the mis-use of Buffer.address(ByteBuffer)
• Fix: Harden against the mis-use of Pool.destroy(long)

This update for libapr1, libtcnative-1-0, tomcat fixes the following issues:

• CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631).
• CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502).
• CVE-2026-74049: Jasper JSTL <c:redirect> plug-in implementation omits page abort (bsc#1286555).
• CVE-2026-75973: improper authentication when Jakarta authentication is configured with SimpleAuthConfigProvider (bsc#1282630).
• CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).
• CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628).
• CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599).
• CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627).
• CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626).
• CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625).
• CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).
• CVE-2026-80353: TOCTOU when creating unix domain sockets for the APR/Native connector allows an unauthorized local user to access the unix domain socket (bsc#1286902).
• CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623).
• CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).
• CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621).
• CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620).
• CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).
• CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581).
• CVE-2026-88041: Information disclosure via incomplete HTTP trailer cleanup (bsc#1286559).
• CVE-2026-93446: Possible TLS 1.3 connection failures (bsc#1286571).
• CVE-2026-101296: Authentication bypass via non-GSSAPI SASL in JNDI realm (bsc#1286361).
• CVE-2026-101356: Information disclosure via incorrect object recycling in HTTP/2 processing (bsc#1286362).

Non security issue fixed:

• Tomcat TLS Broken - Tomcat 9.0.14 update incompatible with tomcat-native (bsc#1130843).

Changes for libapr1:

Update to 1.6.5:

• Fix Win32 build breakage in apr_os_exp_time_put() in 1.6.4
• Fix apr_parse_addr_port() regression in scope_id parsing introduced in 1.6.3
• Numerous corrections to APR poll behavior
• apr_file_trunc: Truncating a buffered file could add unexpected data after the truncate position
• apr_file_trunc: Fix an issue where reading from a buffered file after truncate could return stale data from the buffer
• apr_ipsubnet_create() now fails for an empty input string
• Fix CVE-2017-12613, out-of-bounds read in apr_time_exp*()
• Export build files find_apr.m4 and apr_common.m4
• apr_proc_mutex-pthread: Refcount shared mutexes usage to avoid destruction while still in use by some process(es)
• New APIs: apr_allocator_align(), apr_os_proc_mutex_put_ex(), apr_os_proc_mutex_get_ex(), apr_os_proc_mutex_set_ex(), apr_file_pipe_create_pools(), apr_pollcb_wakeup(), apr_pollcb_method_name(), apr_cstr_(), apr_skiplist_addne(), …