Release date:
2026-10-09 07:50:06 UTC
Description:
- CVE-2026-19445: ssl SNI callback no longer reaches the SSLContext through a borrowed pointer; it takes strong references to the socket's current context and callback, and context_dealloc() unregisters the callback (use-after-free when sni_callback switches contexts; backport of cpython ec44b5a3258c, gh-156293).
- CVE-2026-19553: SSLContext.wrap_bio() now raises ValueError when check_hostname is enabled and no server_hostname is given, like wrap_socket() (backport of cpython 1697ea386c70, gh-156793).
Updated packages:
-
alt-python38-3.8.20-30.el7.x86_64.rpm
sha:faaddd4dea6c28379e77e2b442c33bdeaff91725cbc55073b35f6c7566d318de
-
alt-python38-debug-3.8.20-30.el7.x86_64.rpm
sha:88db89735963cb49770684e7e3f5040cb11ac15ffd4ec877c58de2b97141bf40
-
alt-python38-devel-3.8.20-30.el7.x86_64.rpm
sha:f884e69bd7e5d82315cfd5f5781505e60fbc1abdcfa0332b49126098a44e2b8d
-
alt-python38-idle-3.8.20-30.el7.x86_64.rpm
sha:9f439ad35645ce8cbcaf2697c9bd0edcfbb19ed28198a639844f154337091ff4
-
alt-python38-libs-3.8.20-30.el7.x86_64.rpm
sha:54e98d3efadfc520c5f70642779645b1742ad867400833372e2a9ac08a4436cb
-
alt-python38-test-3.8.20-30.el7.x86_64.rpm
sha:e499e8a85d8af5d0fb57fc0253c54d67cda849ae1eb1d11130ddd2bff739d076
-
alt-python38-tkinter-3.8.20-30.el7.x86_64.rpm
sha:821a5fffd10678a6e41df09ebacbdac449e2715ef12471664c78aa9026300d9b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
