Release date:
2026-10-08 10:01:18 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the ssl servername callback when it switches the connection to another SSLContext.
- CVE-2026-19553: make SSLContext.wrap_bio() require server_hostname when check_hostname is enabled, as wrap_socket() does.
Updated packages:
-
alt-python36-3.6.15-40.el10.x86_64.rpm
sha:209645000b8b85a28cfb951a25eb82165c02ed968ffddb010d983dcb592f5f2a
-
alt-python36-debug-3.6.15-40.el10.x86_64.rpm
sha:d8d541f04437f66c135f1bdafe62917a174fac2a474719d18fee14a755e5221e
-
alt-python36-devel-3.6.15-40.el10.x86_64.rpm
sha:5662fc03a9ff6b926f272d0589f15b2b7a46f447c8bffbe1071f62715cd5e852
-
alt-python36-libs-3.6.15-40.el10.x86_64.rpm
sha:bf6a023e9a5f189d01b20f0347def0de0a66b4b83f0b07d516ef3f37241cf257
-
alt-python36-test-3.6.15-40.el10.x86_64.rpm
sha:60df82d38bd3c1cf917f3c5fe1434dce59e66cb7a428a4715b17bec388b85c4e
-
alt-python36-tkinter-3.6.15-40.el10.x86_64.rpm
sha:046cec7ec22fa0ba7d86f44402de2073d77898f31063e62cf2b883e730057b50
-
alt-python36-tools-3.6.15-40.el10.x86_64.rpm
sha:1e6fe8176ca5e3eaa9273869422921df8d6c60ad3307f01647effb7ba83340fc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.