SUSE-SU-2016:2871-1
Security update for libtcnative-1-0
No scoreFix available
This update for libtcnative-1-0 fixes the following issues:
- Upgrade to libtcnative-1.1.34 (bugfix release) (bsc#1004455)
See https://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html
- Unconditionally disable export Ciphers.
- Improve ephemeral key handling for DH and ECDH. Parameter strength is by default derived from the certificate key strength.
- APIs SSL.generateRSATempKey() and SSL.loadDSATempKey() are no longer supported.
- Various bugfixes.
What each source reports
OSVNo score
Security update for libtcnative-1-0
This update for libtcnative-1-0 fixes the following issues:
- Upgrade to libtcnative-1.1.34 (bugfix release) (bsc#1004455)
See https://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html
- Unconditionally disable export Ciphers.
- Improve ephemeral key handling for DH and ECDH. Parameter strength is by default derived from the certificate key strength.
- APIs SSL.generateRSATempKey() and SSL.loadDSATempKey() are no longer supported.
- Various bugfixes.
- Record
SUSE-SU-2016:2871-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtcnative-1-0SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Software Development Kit 12 SP1 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Software Development Kit 12 SP2 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Server 12 SP1 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Server 12 SP2 | before 1.1.34-12.1 | 1.1.34-12.1 |
libtcnative-1-0SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | before 1.1.34-12.1 | 1.1.34-12.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2016:2871-1 is a vulnerability with no CVSS score yet in libtcnative-1-0, published November 22, 2016. No source lists public exploit code. Fixed in libtcnative-1-0 1.1.34-12.1.