Release date:
2026-10-08 18:43:07 UTC
Description:
- CVE-2026-19445: fix use-after-free of a server-side SSLContext when sni_callback switches SSLSocket.context; _servername_callback now holds strong references to the socket's current context and its callback.
- CVE-2026-19553: SSLContext.wrap_bio() now raises ValueError when check_hostname is True and no server_hostname is given, like wrap_socket(), instead of silently skipping hostname verification.
Updated packages:
-
alt-python39-3.9.23-31.el10.x86_64.rpm
sha:7ace345cddf6990b7e18ad162ee5892d82fbead54201c581c29abe83f22cbf2c
-
alt-python39-debug-3.9.23-31.el10.x86_64.rpm
sha:6fe2493ea1c7dbbd2182c8b8de7be6b0bd665d56c36a5c9f48be0bb7f52c3cce
-
alt-python39-devel-3.9.23-31.el10.x86_64.rpm
sha:0b3d7a025c0d6c3d822e114cb524e3d75e4766aa54eb86ed08d7763da3efca4d
-
alt-python39-idle-3.9.23-31.el10.x86_64.rpm
sha:5a40bed45c931a3789e2d6b307998e7c22d6c05cddd8272c31ebfba0025f327a
-
alt-python39-libs-3.9.23-31.el10.x86_64.rpm
sha:825e9067d48bf8d3c2c21aba450f5b8d6f2fc437e1a83322a9780c07050fe755
-
alt-python39-test-3.9.23-31.el10.x86_64.rpm
sha:9a6cd0cd5ad677ace78d29892e3aa966cd2e06b53311b505fead2c1f626c75ba
-
alt-python39-tkinter-3.9.23-31.el10.x86_64.rpm
sha:c62333c87415f8ad7eaa7becc9e8bc370c7cc5d1942bc25c91a45a3284cdf450
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
