Release date:
2026-10-09 06:58:02 UTC
Description:
- CVE-2026-19445: fix use-after-free of a server-side SSLContext when sni_callback switches SSLSocket.context; _servername_callback now holds strong references to the socket's current context and its callback.
- CVE-2026-19553: SSLContext.wrap_bio() now raises ValueError when check_hostname is True and no server_hostname is given, like wrap_socket(), instead of silently skipping hostname verification.
Updated packages:
-
alt-python39-3.9.23-31.el9.x86_64.rpm
sha:a3ab1d7ed9c0c7dbc577d6aa3480e78a7ac13da5c4d262788419bc05e9acdb9a
-
alt-python39-debug-3.9.23-31.el9.x86_64.rpm
sha:546065311cc076e10c310b736bd607e22f774394142d7c04f7c62e1658ac08d5
-
alt-python39-devel-3.9.23-31.el9.x86_64.rpm
sha:4ab94d41d7718e44437159f2c53dd002076be3bda1a97cda1ee138a2b8f4f267
-
alt-python39-idle-3.9.23-31.el9.x86_64.rpm
sha:8ae34dd8f5f6a52fcaab30a99fad196226c5de6e70487edf3d622e3e692aca5c
-
alt-python39-libs-3.9.23-31.el9.x86_64.rpm
sha:15385efc5c6808d4f1508599a3f05bec3b5e68e7e7c709f06c2d9a1aff7c337d
-
alt-python39-test-3.9.23-31.el9.x86_64.rpm
sha:7652752efe8853ee88ee73307b3e52bdd5eaf652bc26c1aca7b6847acabd7921
-
alt-python39-tkinter-3.9.23-31.el9.x86_64.rpm
sha:4b43bb2b05d2716cd8462c34ac60e617cac23f15abdc015550ab411d4e0c827c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
