Release date:
2026-10-09 06:22:40 UTC
Description:
- CVE-2026-19445: ssl: hold strong references in the SNI servername callback
instead of a borrowed SSLContext pointer (use-after-free after sni_callback
switches SSLSocket.context).
- CVE-2026-19553: ssl: SSLContext.wrap_bio() now requires server_hostname when
check_hostname is enabled, like wrap_socket().
Updated packages:
-
alt-python37-3.7.17-32.el7.x86_64.rpm
sha:d0eec51175768907ae3f4b1cf88e211186d4c88fac7d8a43fe36364933f7f322
-
alt-python37-debug-3.7.17-32.el7.x86_64.rpm
sha:4e59984921c710d7ed80831de8d473bf6f7c048f8853877e072c7cb632c8cf20
-
alt-python37-devel-3.7.17-32.el7.x86_64.rpm
sha:96e316d5be3d26eb560b7751ac360c255539cb6922b2082410739974e8ebe9cf
-
alt-python37-libs-3.7.17-32.el7.x86_64.rpm
sha:11d2201d1aa20439557c628e9981aac0ffe09cd5ec487b2c0b74c7e4bdd26d61
-
alt-python37-test-3.7.17-32.el7.x86_64.rpm
sha:10d92e05083e1fd1f6949930137ea877bdc0ffc2bade6898f4498468fe176af2
-
alt-python37-tkinter-3.7.17-32.el7.x86_64.rpm
sha:64ab4963cab84e2e692062694535ce2fbacd92be62db847e03e79c8ec80d89e2
-
alt-python37-tools-3.7.17-32.el7.x86_64.rpm
sha:cda6bde5ff4fcbd07fc01f7b5be1e7c1e9ebe7d9a6bad507909d5a92ac60a6c0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
