Release date:
2026-10-09 06:52:43 UTC
Description:
- CVE-2026-19445: ssl: hold strong references in the SNI servername callback
instead of a borrowed SSLContext pointer (use-after-free after sni_callback
switches SSLSocket.context).
- CVE-2026-19553: ssl: SSLContext.wrap_bio() now requires server_hostname when
check_hostname is enabled, like wrap_socket().
Updated packages:
-
alt-python37-3.7.17-32.el8.x86_64.rpm
sha:f05d7ad87abe034a9eab68b1f8e7744eaa5c76320ca74d7b2c27d8325d1c3293
-
alt-python37-debug-3.7.17-32.el8.x86_64.rpm
sha:e129ce7ac8e39104ca08d66df754f012e530e611498a483f5c02af91d031a739
-
alt-python37-devel-3.7.17-32.el8.x86_64.rpm
sha:0aa09010ddef243cfbb39095331ca3ee5fd94bbc8dc57af1f233fc53149793a5
-
alt-python37-libs-3.7.17-32.el8.x86_64.rpm
sha:88f57426af591853b28aa270c772d314363da5400e6db5c2fcad5ce1f9c0ceaf
-
alt-python37-test-3.7.17-32.el8.x86_64.rpm
sha:71b1794dcf124c380714fe8c21d215e8b568a112caa5b0ed2df78ec893e0c14b
-
alt-python37-tkinter-3.7.17-32.el8.x86_64.rpm
sha:bead6f88d1e3ad0a7a25d2e28e7facd78b5e39f5acf8edf66e9ded32e5fa6444
-
alt-python37-tools-3.7.17-32.el8.x86_64.rpm
sha:edb53271abb13249f70dda250f8d2b75fca982a1ff82692a4a6e09336c4c2e5d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
