[CLSA-2026:1792155767] Fix CVE(s): CVE-2026-19553
Type:
security
Severity:
Important
Release date:
2026-10-16 13:02:58 UTC
Description:
* SECURITY UPDATE: Hostname verification bypass in SSLContext.wrap_bio() - debian/patches/CVE-2026-19553.patch: validate the server_side, server_hostname and session arguments of SSLContext.wrap_bio() like wrap_socket() does, and emit a DeprecationWarning when check_hostname is enabled but no server_hostname is given, instead of silently skipping certificate hostname verification (backport of the upstream 3.10 fix) - CVE-2026-19553 * debian/rules: disable PGO on armel; its profile test run exceeds the build time limit
CVEs fixed:
Updated packages:
  • idle-python3.9_3.9.2-1+deb11u7+tuxcare.els1_all.deb
    sha:4de4d64f11186cf0eb85a532883bf3c20f2a16ad
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:0b7fc6c8eac153285cbb3d994c70918e99ca0485
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:cba2a3f4e79ea4f1ff1026033017e6c0d04b328a
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:01044c383fd0ac5210f629562f50224c73ee8ccf
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:ae4d0cd4ce087dc375fd575d5c5f65f000432d23
  • libpython3.9-testsuite_3.9.2-1+deb11u7+tuxcare.els1_all.deb
    sha:7357e85e5927675ab47be361ec4baaa8199ece72
  • python3.9_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:5bd29fb78cb541d1205d756b7a0cf668d17f0fc6
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:67d00e0dfaea90709a3b32e45ae5d632b3190cc4
  • python3.9-doc_3.9.2-1+deb11u7+tuxcare.els1_all.deb
    sha:eeaeaf6bd9c49c889282aa014492376364858f9b
  • python3.9-examples_3.9.2-1+deb11u7+tuxcare.els1_all.deb
    sha:5943c05ea7a62986391d727f8a550818c34390b4
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:486af1e2f469505bf5a7ec110c71dc7bef891819
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:06c0d20a9b4017f85a8732ad248a6cb67aae4bbe
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els1_amd64.deb
    sha:c72c3e1220bb9c1f4893f9e5ef2dbd1db2f3b89f
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:a4929d6abceeb14d1ea314d49c5031ecb40a1db0
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:4115f804ecf800c08930878ceceecf48ce49531f
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:e687c041839b3e94db2156bb48b0b90f47c809fa
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:59b49ff9483164d707d72bfdeffbfc5de64e4bdc
  • python3.9_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:f43a5182ae49e2324dc24ba4a9e2f81af2c8a401
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:b7cf5a9e9f6bfe2acdd2c6ef1e721bd1ef9796be
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:8545f5241c2904db8de51219967b8a7895413893
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:844a74a4f1ee317ff62583c4708764ea708254d5
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els1_arm64.deb
    sha:0053029ab5992e5c6b9e0cacd78a72e552a518ff
  • libpython3.9_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:43fb3397f702bb934a27682b9ed269979d95230f
  • libpython3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:7afcac1b8874ffbaf0a06bd754b654519e752312
  • libpython3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:79f24dd36ee9640ad38e2550d8622702507c4204
  • libpython3.9-stdlib_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:d6f11b2ff599b846c1e281eb7ada4c39f3601f9f
  • python3.9_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:ee79aec80460aea8a17976f4db90590aadce60ba
  • python3.9-dev_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:e23f956e1f9176240e8d4196c3b9bd357645cbdb
  • python3.9-full_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:864c721fdd49962446c317939b0abed30569d38a
  • python3.9-minimal_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:9d998e40dfc34788fbf9ed1898bd2030d43f2bf2
  • python3.9-venv_3.9.2-1+deb11u7+tuxcare.els1_armel.deb
    sha:2ad62b65b95663df421ce4f07620e2f82362da51
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.