CLSA-2026-1791803568

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791803568
Upstream
CVE (2)
Published
2026-10-19T20:53:46Z
Modified
2026-10-26T09:32:02Z
Summary
Fix CVE(s): CVE-2026-19445, CVE-2026-4786
Details
  • SECURITY UPDATE: use-after-free in the ssl servername (SNI) callback
    • debian/patches/CVE-2026-19445.patch: take the SSLContext from the connection and hold references to it and to the callback while the callback runs, instead of using the borrowed pointer registered with OpenSSL, and unregister the callback when the context is deallocated, in Modules/_ssl.c, so a servername callback that switches the connection to another context can no longer make the server call through a freed SSLContext.
    • CVE-2026-19445
References

Affected packages

TuxCare:Ubuntu:16.04
idle-python3.5

Package

Name
idle-python3.5
Purl
pkg:deb/tuxcare/idle-python3.5?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
libpython3.5

Package

Name
libpython3.5
Purl
pkg:deb/tuxcare/libpython3.5?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
libpython3.5-dev

Package

Name
libpython3.5-dev
Purl
pkg:deb/tuxcare/libpython3.5-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
libpython3.5-minimal

Package

Name
libpython3.5-minimal
Purl
pkg:deb/tuxcare/libpython3.5-minimal?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
libpython3.5-stdlib

Package

Name
libpython3.5-stdlib
Purl
pkg:deb/tuxcare/libpython3.5-stdlib?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
libpython3.5-testsuite

Package

Name
libpython3.5-testsuite
Purl
pkg:deb/tuxcare/libpython3.5-testsuite?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5

Package

Name
python3.5
Purl
pkg:deb/tuxcare/python3.5?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5-dev

Package

Name
python3.5-dev
Purl
pkg:deb/tuxcare/python3.5-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5-doc

Package

Name
python3.5-doc
Purl
pkg:deb/tuxcare/python3.5-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5-examples

Package

Name
python3.5-examples
Purl
pkg:deb/tuxcare/python3.5-examples?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5-minimal

Package

Name
python3.5-minimal
Purl
pkg:deb/tuxcare/python3.5-minimal?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"
python3.5-venv

Package

Name
python3.5-venv
Purl
pkg:deb/tuxcare/python3.5-venv?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.5.2-2ubuntu0~16.04.13+tuxcare.els31

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791803568.json"