Release date:
2026-10-08 08:16:57 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the ssl servername callback when it switches the connection to another SSLContext.
- CVE-2026-19553: make SSLContext.wrap_bio() require server_hostname when check_hostname is enabled, as wrap_socket() does.
Updated packages:
-
alt-python36-3.6.15-40.el8.x86_64.rpm
sha:de993134ef7a2ed8f292144f155e08272ab3eab1d9b9bf1da1d3082c640a4695
-
alt-python36-debug-3.6.15-40.el8.x86_64.rpm
sha:90f3329c8bc6b5b44dfc5a0440e968271b6becfec1efcd2cf524aee988a69283
-
alt-python36-devel-3.6.15-40.el8.x86_64.rpm
sha:24069682ea6e152d4d33b4faeedf32eb601ad05902e88cdc62972c9511d704fd
-
alt-python36-libs-3.6.15-40.el8.x86_64.rpm
sha:6d52672e4c70f1396aa89540d685d2df13205aee4034b2fd0868881c0f456aa6
-
alt-python36-test-3.6.15-40.el8.x86_64.rpm
sha:556aa8241b9dbfaf192664d30e06e5d5389f0e96f04e4de2c3700564579b12db
-
alt-python36-tkinter-3.6.15-40.el8.x86_64.rpm
sha:74ff0c35fbf5be398a3f5bec64a968243019834a0ad67d2c36c2f0aa4f5a3f57
-
alt-python36-tools-3.6.15-40.el8.x86_64.rpm
sha:c65f3803e572dc400b089d9e650e2390398a0119c386e42bad52f95c60d0ffa5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.