{"id":"SUSE-SU-2016:2871-1","aliases":[],"status":"published","title":"Security update for libtcnative-1-0","description":"This update for libtcnative-1-0 fixes the following issues:\n\n- Upgrade to libtcnative-1.1.34 (bugfix release) (bsc#1004455)\n  See https://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html\n  * Unconditionally disable export Ciphers.\n  * Improve ephemeral key handling for DH and ECDH. Parameter strength is by default derived from the\n    certificate key strength.\n  * APIs SSL.generateRSATempKey() and SSL.loadDSATempKey() are no longer supported.\n  * Various bugfixes.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-11-22T11:11:15Z","modified":"2016-11-22T11:11:15Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libtcnative-1-0","fixed_in":["1.1.34-12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libtcnative-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-12.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162871-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1004455","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2016:2871-1","title":"Security update for libtcnative-1-0","description":"\nThis update for libtcnative-1-0 fixes the following issues:\n\n- Upgrade to libtcnative-1.1.34 (bugfix release) (bsc#1004455)\n  See https://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html\n  * Unconditionally disable export Ciphers.\n  * Improve ephemeral key handling for DH and ECDH. Parameter strength is by default derived from the\n    certificate key strength.\n  * APIs SSL.generateRSATempKey() and SSL.loadDSATempKey() are no longer supported.\n  * Various bugfixes.\n","status":"published","published":"2016-11-22T11:11:15Z","modified":"2016-11-22T11:11:15Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}