CLSA-2026-1791965784

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791965784
Upstream
Published
2026-10-14T08:16:35Z
Modified
2026-10-26T09:31:44Z
Summary
python2: Fix of CVE-2026-19445
Details
  • CVE-2026-19445: look up the SNI servername callback's SSLContext from the connection instead of the borrowed pointer registered with OpenSSL, and hold strong references to that context and to the callback while they are in use, so a callback that switches the socket to another context and drops the last reference to the context carrying it can no longer be reached through freed memory; the servername callback is also unregistered when a context is deallocated, since its SSL_CTX can outlive the Python object
References

Affected packages

TuxCare:CentOS:8.4
python2

Package

Name
python2
Purl
pkg:rpm/tuxcare/python2?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-debug

Package

Name
python2-debug
Purl
pkg:rpm/tuxcare/python2-debug?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-devel

Package

Name
python2-devel
Purl
pkg:rpm/tuxcare/python2-devel?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-libs

Package

Name
python2-libs
Purl
pkg:rpm/tuxcare/python2-libs?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-test

Package

Name
python2-test
Purl
pkg:rpm/tuxcare/python2-test?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-tkinter

Package

Name
python2-tkinter
Purl
pkg:rpm/tuxcare/python2-tkinter?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"
python2-tools

Package

Name
python2-tools
Purl
pkg:rpm/tuxcare/python2-tools?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.18-4.module_el8.4.0+2679+b40f26fc.tuxcare.els29

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791965784.json"