[CLSA-2026:1791453661] alt-python36: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-08 10:01:18 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the ssl servername callback when it switches the connection to another SSLContext. - CVE-2026-19553: make SSLContext.wrap_bio() require server_hostname when check_hostname is enabled, as wrap_socket() does.
Updated packages:
  • alt-python36-3.6.15-40.el10.x86_64.rpm
    sha:209645000b8b85a28cfb951a25eb82165c02ed968ffddb010d983dcb592f5f2a
  • alt-python36-debug-3.6.15-40.el10.x86_64.rpm
    sha:d8d541f04437f66c135f1bdafe62917a174fac2a474719d18fee14a755e5221e
  • alt-python36-devel-3.6.15-40.el10.x86_64.rpm
    sha:5662fc03a9ff6b926f272d0589f15b2b7a46f447c8bffbe1071f62715cd5e852
  • alt-python36-libs-3.6.15-40.el10.x86_64.rpm
    sha:bf6a023e9a5f189d01b20f0347def0de0a66b4b83f0b07d516ef3f37241cf257
  • alt-python36-test-3.6.15-40.el10.x86_64.rpm
    sha:60df82d38bd3c1cf917f3c5fe1434dce59e66cb7a428a4715b17bec388b85c4e
  • alt-python36-tkinter-3.6.15-40.el10.x86_64.rpm
    sha:046cec7ec22fa0ba7d86f44402de2073d77898f31063e62cf2b883e730057b50
  • alt-python36-tools-3.6.15-40.el10.x86_64.rpm
    sha:1e6fe8176ca5e3eaa9273869422921df8d6c60ad3307f01647effb7ba83340fc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.