Release date:
2026-10-08 09:52:23 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the ssl servername callback when it switches the connection to another SSLContext.
- CVE-2026-19553: make SSLContext.wrap_bio() require server_hostname when check_hostname is enabled, as wrap_socket() does.
Updated packages:
-
alt-python36-3.6.15-40.el9.x86_64.rpm
sha:8d06b18e7f17fa4a6bb030d55dfce436fa97add46fe00aec67e39d05f6eaad61
-
alt-python36-debug-3.6.15-40.el9.x86_64.rpm
sha:f4717c014f543136edca3324e61090aab91df5634af4a059ee41fd23c1b6e2c4
-
alt-python36-devel-3.6.15-40.el9.x86_64.rpm
sha:a212d3176ce15bc19a44295b96d50e725e29149341572c187760c365dbcd708b
-
alt-python36-libs-3.6.15-40.el9.x86_64.rpm
sha:e01b248ade8bf57fde04fd50c6043ac5fcc79bbc6c740dbc6787e0e0362274b6
-
alt-python36-test-3.6.15-40.el9.x86_64.rpm
sha:51d6663ec88e349b28fec02fec895d67c17f2b486ee69addc940f6a1e649f0ef
-
alt-python36-tkinter-3.6.15-40.el9.x86_64.rpm
sha:28b2006845cca32fcf992d8b7350a9e8e594de04b623d917e2cbb7ebb49a657b
-
alt-python36-tools-3.6.15-40.el9.x86_64.rpm
sha:8f9ede5cd57304e883ddd8b6c98ae5f97113e1b0c7fa11f5205f160f520a835a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
