[CLSA-2026:1791569661] Fix CVE(s): CVE-2026-19445, CVE-2026-4786
Type:
security
Severity:
Critical
Release date:
2026-10-19 00:59:20 UTC
Description:
* SECURITY UPDATE: use-after-free in server-side SSL SNI callbacks - debian/patches/CVE-2026-19445.patch: stop using a borrowed SSLContext callback argument, retain the current context and callback during SNI dispatch, and unregister the callback before context teardown; add regression tests for callback exceptions and TLS 1.3 HelloRetryRequest redispatch - CVE-2026-19445
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.18-1~20.04.7+tuxcare.els8_all.deb
    sha:24e07eee0f17d0d3d74502c6b73961f99482a8ce
  • libpython2.7_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:ecf19407d0ad8302eaa7c179b50dd2ce9c46e06e
  • libpython2.7-dev_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:95ddcbee397ff2b3dd75fc27e0e129db62735f3f
  • libpython2.7-minimal_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:12229b810340bbbac2965f21bd0a42f68485ad8c
  • libpython2.7-stdlib_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:1b0348c93a6964b3e9bfaa2ce9412e457b007269
  • libpython2.7-testsuite_2.7.18-1~20.04.7+tuxcare.els8_all.deb
    sha:5a98b0b9e5ffaed831db4dcf8f82e597990c6e21
  • python2.7_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:3b04e5eebea9bfba473621fcc5b7621dcdd92935
  • python2.7-dev_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:1152a129fb43195549ae9729824f2526edd4311a
  • python2.7-doc_2.7.18-1~20.04.7+tuxcare.els8_all.deb
    sha:92449ef2770aac6dbe303610dbaa8d8e6e4b809b
  • python2.7-examples_2.7.18-1~20.04.7+tuxcare.els8_all.deb
    sha:09675505ecf26a8d9e6f28035e6bbb3f9d797a89
  • python2.7-minimal_2.7.18-1~20.04.7+tuxcare.els8_amd64.deb
    sha:5fcb59996a099dceb8e4c7393db490013ab494cd
  • libpython2.7_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:2651e25b08ae40f3c3b0236073dd75138107e786
  • libpython2.7-dev_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:e6af225eff562f8eaeebfd04aaa6911cd88f658e
  • libpython2.7-minimal_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:5f8bc053dc77094643d288160cb1002596d14c48
  • libpython2.7-stdlib_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:8f8294122242f17db18bbc2b9832c9f31f225491
  • python2.7_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:380b9fa97a82bdf201340c0e915f4319976f0d5a
  • python2.7-dev_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:44ad591311f201875ae50eca4bf348edab49c050
  • python2.7-minimal_2.7.18-1~20.04.7+tuxcare.els8_arm64.deb
    sha:1a666d5710041a16dfa0e337e9f498d6b3c68433
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.