Release date:
2026-10-09 06:33:29 UTC
Description:
- CVE-2026-19445: fix use-after-free of a server-side SSLContext when sni_callback switches SSLSocket.context; _servername_callback now holds strong references to the socket's current context and its callback.
- CVE-2026-19553: SSLContext.wrap_bio() now raises ValueError when check_hostname is True and no server_hostname is given, like wrap_socket(), instead of silently skipping hostname verification.
Updated packages:
-
alt-python39-3.9.23-31.el8.x86_64.rpm
sha:a6c822a1c44cc59cef4f0e42b00ddf898c4fad962607c93c726f2a565de0224f
-
alt-python39-debug-3.9.23-31.el8.x86_64.rpm
sha:bdebecba7033a8903fe5473f0f173395ac258fb545c91ce93f0ad68c81f8c066
-
alt-python39-devel-3.9.23-31.el8.x86_64.rpm
sha:043d99afa3aceedad151945724bd4dea892c1c939d0e6552a9ef82e6ed6a3d80
-
alt-python39-idle-3.9.23-31.el8.x86_64.rpm
sha:b7b92a3711ed5cab5a41035d3cfa239a6a413c6146dd03a6f0705b15818c32c1
-
alt-python39-libs-3.9.23-31.el8.x86_64.rpm
sha:3b5593b0f98c0b96a48fc8f70d19be0e4d675c9e4e621a1cac966cc00e08b9fe
-
alt-python39-test-3.9.23-31.el8.x86_64.rpm
sha:edfab4af5b423292d61c033a67c20c83b42112dd246f134c344f380129787749
-
alt-python39-tkinter-3.9.23-31.el8.x86_64.rpm
sha:e24146aee5d4acb8ade95c38939ba6ca38e24d3de1a0a30c1374895fbc997da7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
