[CLSA-2026:1791449857] alt-python36: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-08 08:57:53 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the ssl servername callback when it switches the connection to another SSLContext. - CVE-2026-19553: make SSLContext.wrap_bio() require server_hostname when check_hostname is enabled, as wrap_socket() does.
Updated packages:
  • alt-python36-3.6.15-40.el7.x86_64.rpm
    sha:4ddbbf35dca1338476a59dd983880eefce561951b227f0aca65a43bcf66808cd
  • alt-python36-debug-3.6.15-40.el7.x86_64.rpm
    sha:f3a380e1230d2dce393d87159ced301ccd4ddba575b28643633642eb5fb5219e
  • alt-python36-devel-3.6.15-40.el7.x86_64.rpm
    sha:fb6a898e9805a854be68b7508dc42c358ab4c63672d7bd5b4398c8c999bb7c78
  • alt-python36-libs-3.6.15-40.el7.x86_64.rpm
    sha:e00e1001fada4490eb56f18bd307d5acaadb74d9ec266c857204265d8d0da3f5
  • alt-python36-test-3.6.15-40.el7.x86_64.rpm
    sha:b4a4379b3704a863065d767bd4956f9a691413e3b0b20f6a77a6f7d4115667a2
  • alt-python36-tkinter-3.6.15-40.el7.x86_64.rpm
    sha:61b448e7135af3bb9c164d5e1fcfd25b90e697205ab152de50cf3d6aa6b0f14a
  • alt-python36-tools-3.6.15-40.el7.x86_64.rpm
    sha:be33708139d842c0321f7a2c578f4072be39305ab37d377bc80589d61f58824e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.