[CLSA-2026:1792154123] python3.11: Fix of CVE-2026-19445
Type:
security
Severity:
Critical
Release date:
2026-10-16 12:35:33 UTC
Description:
- CVE-2026-19445: ssl: resolve the SSLContext for the SNI servername callback from the connection instead of the borrowed SSL_CTX argument, and unregister the callback in context_dealloc, so a context released after sni_callback switched the connection is no longer used after it is freed
CVEs fixed:
Updated packages:
  • python3.11-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:00532e07f8dbdacc3d9729fa890fa08b1223c6d143a16231c3a41eaee86856c8
  • python3.11-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:8d788bb775ca1fa763e32fbe4d9affec474521f982f27bf5648a351fcd467e3a
  • python3.11-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:20b043bf51f952c7e5e067b3e29865adaf2573cc4ba17a79dd2395e823a12c9b
  • python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:eab7f6e2421229823df9f41bbc6f8f6f089db13a3503b6e926234cfe9cf5935a
  • python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:58f2bff55223c146043f1c4b575002f2f5ca8919597d3182bfd96633435f2244
  • python3.11-debug-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:c0e527dd2173e8940b199a78ef4c35d1a2161af3fc7df9d0006f1bff5076e4cb
  • python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:592a9dfb00495d99b5184b12b6e718158667829be5d07146ecdb1ff8efe41439
  • python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:b304a668f7160af6b44685a43bc972a486f948122ba7d1721236d2700a879413
  • python3.11-devel-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:59d2857892eb5cf9584ccbefa8a12277eb28ee74518498b4458daf90c5fc8dc1
  • python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:d11779196a168c0785fce7ffb638bef63f0447085bc3e44625b0a7fb5f314577
  • python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:95e33a9b1663ad1e6397aeb496d250801a6bbd7be9a1b2f801a40ba344626a1b
  • python3.11-idle-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:1a41f28b8ef84e4765aca71ada1b8d52bf38761ea0e0f15aaa3d2ec5800fa383
  • python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:cf89be4c611f1fa54b256896e11af013c553a91517a30d95a0b0d0670d9e6f07
  • python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:75e02999d0734987062e5935281d23679c32e966605d87ba4d2ecc947c17aca5
  • python3.11-libs-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:1b0e14f98c919a731a7bdcf59ab813acedb560240a34f77493d873b97ea520ae
  • python3.11-test-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:1aa3ba2cfb23018d159d272cbbf6943ad585c9537fae1bf79d7ca9e9dcf490d1
  • python3.11-test-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:8133cb7d88db6a9e5f2bf2a581cb6eb7f0d7374d044af48fc2cc4e34dbadc1f8
  • python3.11-test-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:48737e2f0776e771d9a17c879a86966c9193e0ff0dd33d0d76107c31531b6827
  • python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.aarch64.rpm
    sha:9683936f189b99aa33aba94aa47a455af702b6fde74b26943bf810795a2ceebf
  • python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.i686.rpm
    sha:c203e87a0a34cf7976e7cd774c64ae88641579e893be42aa023cba6b4f599c20
  • python3.11-tkinter-3.11.13-10.el9_8.tuxcare.els2.x86_64.rpm
    sha:fc812df4a9f5fff341e8d9d5633ccdcc2ca4003cf229f82e4560fd0585315778
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.