Release date:
2026-10-14 09:13:36 UTC
Description:
* SECURITY UPDATE: use-after-free in the SNI servername callback when the
callback switches the connection to another SSLContext
- debian/patches/CVE-2026-19445.patch: look the SSLContext up from the
connection with SSL_get_app_data() and hold strong references to it and
to the Python callback for the duration of _servername_callback() in
Modules/_ssl.c, instead of the borrowed pointer registered with
SSL_CTX_set_tlsext_servername_arg(), which the callback itself releases
when it assigns SSLSocket.context; stop registering that argument in
set_servername_callback() and unregister the servername callback in
context_dealloc() so an SSL_CTX that outlives its SSLContext as a
connection's session_ctx leaves no Python callback behind
- CVE-2026-19445
Updated packages:
-
idle-python2.7_2.7.18-8+deb11u1+tuxcare.els6_all.deb
sha:0785ef5fcf2e9b9b6c0d4d5241a4e524c17fdbd7
-
libpython2.7_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:ea3dbecfe5cb4909b1e82092b6d598e2dc044f9c
-
libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:e242d6f49df8e4e2e82330df14827529846aba4d
-
libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:8d0597f0c83ddb1136c6478f2d58826baa672a2c
-
libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:b3dc58dc7be5a7b24a1d5c557d4aae844de675ff
-
libpython2.7-testsuite_2.7.18-8+deb11u1+tuxcare.els6_all.deb
sha:48bcd2424d91c1233488825483c4bd427b5171f9
-
python2.7_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:726c0accd5e8b7bc2485eb6068697038726b2e59
-
python2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:c49057ac9b47ee978a6fcf13f1d62e0da0cfa88a
-
python2.7-doc_2.7.18-8+deb11u1+tuxcare.els6_all.deb
sha:b224720f12128ad0e8338ef3a323524ed65ac461
-
python2.7-examples_2.7.18-8+deb11u1+tuxcare.els6_all.deb
sha:f59503e372861146158e0795967c0d550e922f6b
-
python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_amd64.deb
sha:9545e8c9eb886bcb1a8f12b873e1ef77798bfd5e
-
libpython2.7_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:b9d7db597a0c3cc700dabb4ee9a4285f0e5376ec
-
libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:7045ce3deb7880414c77a49f4f6352d3afbb4c8e
-
libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:7cea59548a2a2f186898b5e329476f0bae453867
-
libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:79e729c6232586a4932bec906ef42af9fb4c3966
-
python2.7_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:da0d079d6b75c7c656c5f8f78921abfe0770fe88
-
python2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:96eafb77059a7b68fc447d9f0ceda23dee59d59e
-
python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_arm64.deb
sha:835056e1f85083943d6be7257d58bd7524fddd6c
-
libpython2.7_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:f549b4ab497965398fb83adb6758351f1d1f16e2
-
libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:24eac0ac22c03deaebac3d655cdc00421c2c41d3
-
libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:7c876214247a18724db0a84f3d22fb53e2bd7e54
-
libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:97d3fd04fbcc7c03f104a98a7b8f366278f8f1dc
-
python2.7_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:3c759bd92b588ecb999a4eb9033ae668a4b0a78b
-
python2.7-dev_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:c17ff5bffe2802177a4e37041063a81319d812cc
-
python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els6_armel.deb
sha:67cbd465c43f87745e847e605c4b00da34520fdf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
