[CLSA-2026:1791820273] python3.9: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-12 15:51:25 UTC
Description:
- CVE-2026-19445: prevent use-after-free in the TLS server name callback when switching SSL contexts - CVE-2026-19553: validate SSLObject server hostname and session parameters before wrapping memory BIOs
CVEs fixed:
Updated packages:
  • python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els38.noarch.rpm
    sha:382b3c0d2c4b185e0d8edffa7fcab222f0f78bc85466d33b6eeda1ef6a09b02d
  • python3-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:2ecb69d82cce74ffab64f25d7fa3dd59af32e545e8e483574e3493d19913e2ab
  • python3-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:97f35858f37045567f26452e2ab79e6b128a5e688e385970fd1a78e68c566f6d
  • python3-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:e19ecc7a2c27852b5aabe39e5eea3806afc381f4e5ab300a165cc93c4c02a8c6
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:d409d06fa2bc2a189ee064e8404aa6d36d8938cda47dc0f6a4bc8c25365d649d
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:f7c931331f73937fa01252f58f00bfdba5068a69b41c8a58369e96a21def3831
  • python3-debug-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:1d3d7ea3f3270bcd716ae8203a1596e5f53f454451675a58f31da97357946684
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:4e186992899c36116db8a1b4a1580003dd306cd24b827adbdc9a43c406a6425a
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:a845d16bbc952bd77aa02d6847159aaaff45eea3d5c0545be04d8a1dddfb8057
  • python3-devel-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:d69f29882bd542f4ebfa2e183bdc7a061c48634e605fff53c8a1d3c6e4ec0d95
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:02a8dee8cf448a7bfeb092666a00793f143f96e183c60c911352f1451964440b
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:835af2768f6ef4038785d80680b67bd21a609c462ac3b32a02613598320d8ec0
  • python3-idle-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:a13dc02de5d188645d06726d53d117e62cd3568d769ba58d6a8ff682624a58dd
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:866bdbe703ceebdf19eb1506475cd92159514654222a12ed34aff36db0b09ca0
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:2bb60d495f4674a86b99607365cc3444c133aac4662a7ee1eaae314d02bc7516
  • python3-libs-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:98c6c9a2e505198fcb080fd9a8aa7a096f796570da7f8044a3d29fcd6e91678b
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:3d44a8b775a80a872cdb778c02609418d4d4d3834fd9390b52a5904dc03b7715
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:3bee556f77c0bee09200d137d3b569e5fe114b61ba385abaa6d7e395242c5563
  • python3-test-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:f824101ea0b79ffa8378a64e6b114727c4f6205903ec3054f988758dcd564668
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els38.aarch64.rpm
    sha:ae3879c5a52d9dabc6bbd266e7dbbaec7db7bd2f47ff3a35131caa83dd624690
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els38.i686.rpm
    sha:2bde21729de69ae0cd35b45618f11a33bf8b43a67ee400eac36b778e91c77b14
  • python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els38.x86_64.rpm
    sha:0ca0cb24d0f9f8fd3b19fbebe68f91484ce91fed0aba4b09300c131573239871
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.