[CLSA-2026:1792484804] python: Fix of CVE-2026-19445
Type:
security
Severity:
Critical
Release date:
2026-10-20 08:26:56 UTC
Description:
- CVE-2026-19445: look up the SSLContext in the servername callback from the SSL socket instead of the borrowed SSL_CTX callback argument, and unregister the callback when an SSLContext is deallocated, so a context released after the callback switched SSLSocket.context is never used
CVEs fixed:
Updated packages:
  • python-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:bdd1aa4af42ef86b27aa6af7ce4530da6213cee0eb489c8c689194972d1fa7b2
  • python-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:23ceed0d3761fec3e91b8cb25921162eae8d72945e58c833500dfb13e6a029f5
  • python-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:eea34ff29f6cf459461b51fd405dbafa32486574768dbf2ff9f2a73265873086
  • python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:62cac4c8bfd859dee52707ec93f1423f0cba0d94f485980f77d6c28febf844f0
  • python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:d18d69c1139d3c665a7deb1f5d10b7f913f75b5c573b4d912ebf3e5e24fec46f
  • python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:6e6059d17e109ccb8464f137636fdc6a12d5aaf6eac275522e3b8930dc7d1515
  • python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:fd75ffda347e0e2a177eef4ec01f72bbe605084e2e8b7a89af81792e08472d89
  • python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:9a5130b576c7d60377d6ca1115d23994df455aee93fc1ed1cee778d5309cc499
  • python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:aaaa13e459983c294391e8bb9de812225fdb749db436661cc64c886e6c834d36
  • python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:6f0dc25c18492b9084ab68f407d6f28d1b76ed026272c70fbc9c55c1959466fe
  • python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:44d708382603b781b3ecac7d583a2c9476d3856fcfd4f6dd4c1a3c236bef507c
  • python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:bd0586445a4b186471113aa8ecf51d98caa9ec15a39abecc052354716c0e7167
  • python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:b4c24be8a8daa604f2532e184f4fb19f85d0d5fc0e897907a99fd4230e417d1e
  • python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:72e259f740d55a2f72106b21652c480a8e8d42ee0741168c345239ce968bde09
  • python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:ffb9257593a0b7454361995ef6c7702f675cbfb2fa526f8f8a58b71a26b25ba4
  • python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:fbb0116d8969cc75733ce4e6a5c8bcf9bd00b9a057d31473978ca45b493e87fd
  • python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:41f2d63233f336c8c7780c11e7fcdd1bad97f4ffec80c5e67177528ed310ba1b
  • python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:62642efcaad7482ebfce62c235aa13798627cbb9dc6e00e821b06e3c7c88b7bc
  • tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm
    sha:17f1f5d3d2672b63c5ca236dbed643a8140ec8ff5cc61c328263b52ca42c9f9d
  • tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm
    sha:9375cc52de90ad2418f845a7bf1bc322650a17b0295c4c2a9717279d9923b13e
  • tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm
    sha:c096be96726ecae1e4c4aeccd69e2405f35e63778ed511e5490b3c46ed1b4d71
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.