Most recent entries from all

fkie_cve-2026-86247

2026-10-02T06:56:19.054649+00:00

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.

Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

GHSA-jhrw-x5gg-jjqw

2026-10-02T06:56:19.054714+00:00

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.

Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.

openSUSE-SU-2026:11898-1 — libtcnative-1-0-1.3.9-1.1 on GA media

2026-10-02T06:56:19.054735+00:00

libtcnative-1-0-1.3.9-1.1 on GA media

UBUNTU-CVE-2026-86247

2026-10-02T06:56:19.054752+00:00

Affected: Ubuntu:16.04:LTS: tomcat-native, Ubuntu:18.04:LTS: tomcat-native, Ubuntu:20.04:LTS: tomcat-native, Ubuntu:22.04:LTS: tomcat-native, Ubuntu:24.04:LTS: tomcat-native, Ubuntu:26.04:LTS: tomcat-native

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected. Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.