Advisories » MGASA-2026-0476

Updated tomcat-native package fixes security vulnerabilities

Publication date: 09 Oct 2026
Modification date: 09 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86243 , CVE-2026-86246 , CVE-2026-86247

Description

DoS via TLS handshake. (CVE-2026-86243)
Insecure OpenSSL options enabled. (CVE-2026-86246)
Client certificate requirements can be down-graded. (CVE-2026-86247)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36469
• https://www.openwall.com/lists/oss-security/2026/09/23/31
• https://lists.apache.org/thread/8p4jf02w54m22x0cwpq2x53w3ov8o557
• https://www.openwall.com/lists/oss-security/2026/09/23/32
• https://lists.apache.org/thread/dgyvfwb24nbk45ptvlhdyhdhl5o7k5ol
• https://www.openwall.com/lists/oss-security/2026/09/23/33
• https://lists.apache.org/thread/obsson6zhvfg0wsp2bx602l61ltj87r1
• https://www.cve.org/CVERecord?id=CVE-2026-86243
• https://www.cve.org/CVERecord?id=CVE-2026-86246
• https://www.cve.org/CVERecord?id=CVE-2026-86247

SRPMS

10/core

• tomcat-native-1.3.9-1.mga10