Release date:
2026-10-08 11:47:59 UTC
Description:
- CVE-2026-19445: ssl: hold strong references in the SNI servername callback
instead of a borrowed SSLContext pointer (use-after-free after sni_callback
switches SSLSocket.context).
- CVE-2026-19553: ssl: SSLContext.wrap_bio() now requires server_hostname when
check_hostname is enabled, like wrap_socket().
Updated packages:
-
alt-python37-3.7.17-32.el9.x86_64.rpm
sha:afe8b0bb0cc563a0a4ae4acdc4c214c49fc49a20b85647a4e241dcb79017f9c9
-
alt-python37-debug-3.7.17-32.el9.x86_64.rpm
sha:ba53f870818d7bdd5125da7777842ec2405183e074520cb6881f88c1bae1dd71
-
alt-python37-devel-3.7.17-32.el9.x86_64.rpm
sha:63fa9155b86b1e59eec07c8446316aaa8e6adef090c1fba5a7dacc0de098fee0
-
alt-python37-libs-3.7.17-32.el9.x86_64.rpm
sha:ed49a2032bd3cefeb3c9f4a8b2c35f0ef1446b956ce8384263d255c36eae44f6
-
alt-python37-test-3.7.17-32.el9.x86_64.rpm
sha:a4af655c27e7bf8b30a657ff972e7335588ecdce94501409e35b0f3e9d6ea3aa
-
alt-python37-tkinter-3.7.17-32.el9.x86_64.rpm
sha:c0825a4926a1233cf8f5a7936b3218ac4ebd3ab884c6c80c978e761404528ddb
-
alt-python37-tools-3.7.17-32.el9.x86_64.rpm
sha:3ca680bd1449a15aff30055968678d277d9b7f24e39fa56966a48531c81ddf55
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
