[CLSA-2026:1791967190] python2: Fix of CVE-2026-19445
Type:
security
Severity:
Critical
Release date:
2026-10-14 10:05:51 UTC
Description:
- CVE-2026-19445: fix a use-after-free in the SNI servername callback by taking the SSLContext from the live socket, with a strong reference, instead of the borrowed pointer registered on the SSL_CTX, and by unregistering the callback in context_dealloc, so a context released after the callback has switched the connection to another context can no longer be reached through the connection's session_ctx
CVEs fixed:
Updated packages:
  • python2-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:ee9fd570f6be22263397ca64c851928ed7d7b5eafb05731233fbc6b8bbe76d9d
  • python2-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:4f02311e83e8bce599668a69aad9680e47a53cf0553e2f323b36acf6b7c40d30
  • python2-debug-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:f507f70d0c0612d90e5ba4575b89bcbd51a38e437406891b9839f244ce29360a
  • python2-debug-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:6ccf45794c9ff3a5b88006d30a28a6f000a9e3f261378a7ed1a78ad8a98b5818
  • python2-devel-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:3f6fca7d9123c0dfda4beecf5987652163122db24f9f449e89a89e53dd8e0140
  • python2-devel-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:cd94f242653ffcf2f16353f571f658c308327a1a294510c722e5fad8e11f0652
  • python2-libs-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:816be8c22c3004227a76a883243ec8562a53d249421313fca3bf29eeb3f31d33
  • python2-libs-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:4e84f53243b222ab89bc3d874d01a4063a395c5b82ad76e41573bf082849d76b
  • python2-test-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:cd9bf135230102bea1f13f3dd6be219f81ad97ca314f0931c8e7886c83c2d8c8
  • python2-test-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:20b30b735bbbfb03ca50dcf7f9b6f0976d8ce2e59ef8d09084bdaa721c1a231b
  • python2-tkinter-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:7f324db499c5d1fcfebb6626ac37c0b30d2261484ab7d963a36bc6ab65f1eb5e
  • python2-tkinter-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:59b8a643d06f32c1ae843acaa9cb2c14336d90c44a3db9143236b3b0fa305518
  • python2-tools-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.i686.rpm
    sha:d9679bda87f5f477c39ab73b93e47d6dd3f27a6d841bd6741c2a814bfb90c602
  • python2-tools-2.7.18-17.module_el8+2680+c9cbfe57.tuxcare.els17.x86_64.rpm
    sha:312b91bb0e1ced9b876c752882b240e156dc18509128af83a0ede5709e63ed8e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.