SUSE SLES12: libapr1 / libapr1-devel / libtcnative-1-0 / libtcnative-1-0-devel / etc (SUSE-SU-2026:4927-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4927-1 advisory. - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. -...

Security update for libapr1, libtcnative-1-0, tomcat

This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. CVE-2026-74049:...

SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat

This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-7404...

SUSE SLED15: libtcnative-1-0 / libtcnative-1-0-devel / tomcat11 / etc (SUSE-SU-2026:4544-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4544-1 advisory. Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a...

SUSE SLES15: libtcnative-1-0 / libtcnative-1-0-devel / tomcat / etc (SUSE-SU-2026:4546-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4546-1 advisory. Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to...

Security update for libtcnative-1-0, tomcat, tomcat10

This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...

Security update for libtcnative-1-0, tomcat11

This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash bsc1282623. CVE-2026-86246: insecure ALLOWCLIENTRENEGOTIATION,...

Denial-of-service (DoS)

org.apache.qpid, qpid-broker-plugins-amqp-1-0-protocol is vulnerable to a Denial-of-service DoS. The vulnerability is due to improper handling of type size/count values, which allows a pre-authentication attacker to trigger excessive memory allocation...

SUSE SLES16: libtcnative-1-0 / libtcnative-2-0 / tomcat / tomcat-admin-webapps / etc (SUSE-SU-2026:23985-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23985-1 advisory. Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore...

Denial-of-service (DoS)

org.apache.qpid, qpid-broker-plugins-amqp-1-0-protocol is vulnerable to a Denial-of-service DoS. The vulnerability is due to type nesting that can trigger a StackOverflowError, which allows a pre-authentication attacker to send specially crafted nested data and potentially crash the broker...

Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 (critical)

openSUSE security update: security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21984-1 Rating: critical References: bsc1282581 bsc1282599 bsc1282620 bsc1282621 bsc1282622...

libtcnative-1-0-1.3.9-1.1 on GA media (moderate)

libtcnative-1-0-1.3.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11898-1 Rating: moderate Cross-References: CVE-2026-86243 CVE-2026-86246 CVE-2026-86247 CVSS scores: CVE-2026-86243 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-86243 SUSE : 8.7...

fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92550 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92550 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186794...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) potentially affected by CVE-2026-92608 via org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92608 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186798...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to improper exception handling in the process of converting message properties from AMQP 1.0 to AMQP 0-10. An attacker can disrupt message delivery to AMQP 0-10 consumers by sending specially crafted message...

fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92550 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92550 Source advisory: MEND:CVE-2026-92550...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2026-92560 via org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92560 Source advisory: MEND:CVE-2026-92560...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) potentially affected by CVE-2026-92608 via org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92608 Source advisory: MEND:CVE-2026-92608...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68074 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352776...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68060 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352713...