[CLSA-2026:1791323340] python3: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 21:49:12 UTC
Description:
- CVE-2026-19445: look up the SNI callback's SSLContext from the SSL connection instead of a borrowed pointer, fixing a use-after-free when sni_callback switches the connection to another context - CVE-2026-19553: warn when SSLContext.wrap_bio() is called without server_hostname while check_hostname is enabled, and reject server_hostname/session in server mode
Updated packages:
  • python3-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:73e833a67dc4a48e06cb621a9fccf6cdd448c5741702af4ffd662cd4b6944f38
  • python3-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:9b6784f2ae487101cd1c18ca12e890e74c80e8908c485bff743e8b2688dfc2b0
  • python3-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:2aae646caae0a773b5ec7fb874c92737a1bd93f07eacd76827900351943d9dff
  • python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:2717b7d40769e07fa2df7d09fd12f9b68c33161262a6f287cdf291711876cec6
  • python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:ded9d74bfa126463186c7d33bd432653e97e4a20ff4d64c2cf4136ce256cc9a6
  • python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:0d5d074091265a8bb58aa4298ddce035ed84278ed728309f99737dbb3e6a37a5
  • python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:315eef572e67946bb62ab64a74a1e47dc2c4f92aed0d4651c4a73a803dfd549f
  • python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:3837c69a1a1f2afcee47097355ab99ec5ad21c31d1b7a5ac2132e46400015b05
  • python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:6970cbee25fbe84cf1abe392487e74aaf34a058eca81532977749209bb825d7d
  • python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:d1555e765ad8490f304930b59c2087c629a56a8d912386f80d6438fff38f342d
  • python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:92cd04f0db89fb0807686b317b413332c2a4ecd9d37b0c20597ffc8b0d72d7d0
  • python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:11d47b0de4727d71f4d9c84f1c107120bc233b24e8a07f0b062781853df14225
  • python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:168feb5377f8a8c4161591cb8e55e62a01d0ef014b43392f9cd9bca372f53d8d
  • python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:6f0ebe759697c5e9dd67e74636d9a04a87235f1118f5d87e6cf4c882970bc5ac
  • python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:5a967f59102f4448401f68ebee9381946a5ab25ac5cda714dbfc86836a1b8302
  • python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:b22efa7b74c0944ff789579a1e9ab20d3b29ff8b2f25d3ed7a25e3dabb19f991
  • python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:629d774038e84b94a51115bd0506c5eacefa18cc516b5a142f79efa122dac072
  • python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:42073092409eb6e34519dfadffd7bca919d86c630f26164ef48d7bac087a5ee9
  • python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm
    sha:ffe2fe17550ebd1fe05048e9f2c3207f268fb5e68f5d7caf89e937623e34ae5e
  • python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm
    sha:2040fe3a33b4a01c6625d51603901fc8318309d03b2748aadc7a7c776978088d
  • python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm
    sha:92a9f52cc15c49aa7dfd1daa95c2e2fe5e97497e319bfd91cc4c4eb24bdc775a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.