Release date:
2026-10-08 11:43:20 UTC
Description:
- CVE-2026-19445: ssl: hold strong references in the SNI servername callback
instead of a borrowed SSLContext pointer (use-after-free after sni_callback
switches SSLSocket.context).
- CVE-2026-19553: ssl: SSLContext.wrap_bio() now requires server_hostname when
check_hostname is enabled, like wrap_socket().
Updated packages:
-
alt-python37-3.7.17-32.el10.x86_64.rpm
sha:e5af7e90069d67e4d3bba7f96713afdd4a640d6d4b6c1ddefb133e24bee2168c
-
alt-python37-debug-3.7.17-32.el10.x86_64.rpm
sha:5ca341558d050d15fa73db2519db57c74056eb2aebad0e7a47431e459c8e5350
-
alt-python37-devel-3.7.17-32.el10.x86_64.rpm
sha:c1af2b5ecaa24648c853c6f5ccb99a552d34192c04bb3a9ff540c70849fff84a
-
alt-python37-libs-3.7.17-32.el10.x86_64.rpm
sha:718f36ef28ed888b4f8420e49fdda225b696514263a101681253a15868121f48
-
alt-python37-test-3.7.17-32.el10.x86_64.rpm
sha:ee123d8817e69c7be0a17c15644a296e0f09f1151f01e267e1ca53b32f40a31c
-
alt-python37-tkinter-3.7.17-32.el10.x86_64.rpm
sha:e488561b2a57dee7d9656d7bf9d6441401c6c30f169633e2c37072c2ae8869c2
-
alt-python37-tools-3.7.17-32.el10.x86_64.rpm
sha:db3450510db73760e87224a320ddb7a68f9080bc4e535666ec8c8d8cb5de77b7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
