[CLSA-2026:1791530000] python3.11: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-09 07:13:33 UTC
Description:
- CVE-2026-19445: ssl: resolve the SSLContext for the SNI servername callback from the connection instead of the borrowed SSL_CTX argument, and unregister the callback in context_dealloc, so a context dropped after sni_callback switched the connection is no longer used after it is freed - CVE-2026-19553: ssl: validate SSLContext.wrap_bio() arguments in SSLObject._create the way wrap_socket() does - reject server_hostname and session in server mode, and emit a DeprecationWarning when check_hostname is enabled but no server_hostname is given, surfacing the misconfiguration that made certificate hostname verification be skipped silently
Updated packages:
  • python3.11-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:22bf5c1df70e938a5b44db0d0c3ca8236718a66a98200e4af307fd95024733a4
  • python3.11-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:bc3e7d71bac821d1a235429e1d5e3054e5ff371793e05502100a1057a96142f2
  • python3.11-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:399697f33713c3a5fe306621f5bfb40d257e591a0978cba21c402ae41e939312
  • python3.11-debug-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:06a57f1c83c66ec2badab385c7b6ce52b165716e761b7ec7341a3329781b0367
  • python3.11-debug-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:94bc92391199190b68714331f2dc308b01d3a22559c71a4ec842d8b6d9fb4b06
  • python3.11-debug-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:e63d49723ec8a3c78d9780c0cdf1af48a17e56c096561ed13329212529e35df5
  • python3.11-devel-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:7f2fdd4b1103f65bc1bf2ace70f4fa37988d56df720d4e6dd7f14549bd51738d
  • python3.11-devel-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:318f303c2fb5e1fbb527341f4ad5ce24c40c721b8b71f2a1998c16455b6027ef
  • python3.11-devel-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:4663fa11b85b04db995e692c90881c59ed5de068b1e170bb19dc3adb082f53b4
  • python3.11-idle-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:895a8cdfb27351e8db662201a6d9175da5ae6c7176ef61c5961c907d3c8b56da
  • python3.11-idle-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:f98d4463f2eaeaddc303375995abbf37f0c34ecbea818e8fb699307132810b5f
  • python3.11-idle-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:3cd4d2a88837d5f6b483e2f8866bc17f27be25626b8ae628753284a192ff1359
  • python3.11-libs-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:46829a0e3e5ef7aede52dbb051c03e9c133bc3e9cc207e9b8afcdb9f5848d39d
  • python3.11-libs-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:1f0d9183862bcf83a76c8bfc2c4d6ccb87ee16cfa9e74ef0d39d392cc65f1444
  • python3.11-libs-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:0f9bf797801c662d6dd78f170b40afe571fab304c318dc6144fb1dee343fa8b8
  • python3.11-test-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:68a674bfb6dc8312113dd804146a601cd240f680fd84e642a2fb453a496f08c8
  • python3.11-test-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:656c92c936fe193feedb38f9044f3c15c518184aee67d5b8aab0cf2421321efc
  • python3.11-test-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:82d45712469b797b6ed20540063a952a9ce093f7814944efe4ebb0fb804aba2a
  • python3.11-tkinter-3.11.11-2.el9_6.2.tuxcare.els18.aarch64.rpm
    sha:a5305e77e04d73a85a2926aef46a684e7074560d1a9825d5394ac6c1da85eee0
  • python3.11-tkinter-3.11.11-2.el9_6.2.tuxcare.els18.i686.rpm
    sha:bdeb219236af4d828e5bfa341a46b6646465cee6910928d5e3bb9990c7e7436e
  • python3.11-tkinter-3.11.11-2.el9_6.2.tuxcare.els18.x86_64.rpm
    sha:17cfd05151d2b46c5ceb7943e05e84738eee5ce6ee6be3f07db2a7d8e2cca004
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.