Release date:
2026-10-09 07:44:29 UTC
Description:
- CVE-2026-19445: use-after-free of a server-side SSLContext when the servername
callback switches SSLSocket.context. _servername_callback now takes strong
references to the socket's current context and its callback instead of a
borrowed SSL_CTX servername arg, and context_dealloc unregisters the callback.
Updated packages:
-
alt-python27-2.7.18-45.el9.x86_64.rpm
sha:c9b15048af3a8818c7a591f8fa28c625a0b720a6cdbca7fb0aaf3ae55cd9165b
-
alt-python27-debug-2.7.18-45.el9.x86_64.rpm
sha:c69e81957897a8f793f840802871d1f90495064fa5718eaa717d4889bde269b5
-
alt-python27-devel-2.7.18-45.el9.x86_64.rpm
sha:7e19889b463ee2c25206ba326d7240d9d1c1bf2c70f01f6e20cdd1336dea1a42
-
alt-python27-libs-2.7.18-45.el9.x86_64.rpm
sha:71d39e2a655b5d908e682b147849da3a8de6caa4212d5b44b4b407c2d2010c7b
-
alt-python27-test-2.7.18-45.el9.x86_64.rpm
sha:c8d7ec50f6f98f3d7560ff2c6b357e5b4bec6a3683913289d9fbf80331d7f85f
-
alt-python27-tkinter-2.7.18-45.el9.x86_64.rpm
sha:4dff591c1c0d40f9f43ece2f9f89de42d8f16bbc3a34533e0ab25ac4848706fc
-
alt-python27-tools-2.7.18-45.el9.x86_64.rpm
sha:e1db067a4f19c5c25610f96749010b3f369373a429a397b99a6f05d0c2f0a011
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
