Release date:
2026-10-09 07:47:06 UTC
Description:
- CVE-2026-19445: fix use-after-free of a server-side SSLContext when sni_callback switches SSLSocket.context; _servername_callback now holds strong references to the socket's current context and its callback.
- CVE-2026-19553: SSLContext.wrap_bio() now raises ValueError when check_hostname is True and no server_hostname is given, like wrap_socket(), instead of silently skipping hostname verification.
Updated packages:
-
alt-python39-3.9.23-31.el7.x86_64.rpm
sha:ee8409c41f4b0fdc880bf8fb3e956985d9a1f7f0a36fc29eee1eaaac09c64488
-
alt-python39-debug-3.9.23-31.el7.x86_64.rpm
sha:4870db5affe496058acbae7830e9d74d42384dd025dfc732c5b433d55e925e8b
-
alt-python39-devel-3.9.23-31.el7.x86_64.rpm
sha:606ef646d416dc2b2afd538a449af5bd6a3ddaf8868aad18d5fc2f1ff4c487ea
-
alt-python39-idle-3.9.23-31.el7.x86_64.rpm
sha:8492e0aa821de3ef8447fe0536558b0a4f31026a1f789d696fda3d59821081e3
-
alt-python39-libs-3.9.23-31.el7.x86_64.rpm
sha:e142441870a217d33dfc22fc23890730fa39bf526741bd69cd8f100b2963bdd6
-
alt-python39-test-3.9.23-31.el7.x86_64.rpm
sha:50dba09f32fc07d916b7b97e6fb42dd20b2110b40a3425eabf3f63ddcddaa75c
-
alt-python39-tkinter-3.9.23-31.el7.x86_64.rpm
sha:c318242be9e7bcebb37a476aaf0d4cc573577e62229492352f95f9d0df501471
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
