Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Python 3.11 could mishandle SSL connections
published 26 days ago
Summary
The Almalinux Python 3.11 packages (including debug, devel, idle, and libs) have a flaw that could allow improper handling of secure connections, potentially exposing data or causing crashes. Updating to the latest Python 3.11 release fixes the problem and restores proper validation of hostnames and secure channel cleanup. Apply the provided updates as soon as possible to keep your applications safe.
What to do
- Update almalinux python3.11 to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-debug to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-devel to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-idle to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-libs to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-test to version 3.11.2-2.el9_2.2.tuxcare.els38.
- Update almalinux python3.11-tkinter to version 3.11.2-2.el9_2.2.tuxcare.els38.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11 |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-debug |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-devel |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-idle |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-libs |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-test |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3.11-tkinter |
< 3.11.2-2.el9_2.2.tuxcare.els38 Fix: upgrade to 3.11.2-2.el9_2.2.tuxcare.els38
|
Original advisory text
python3.11: Fix of 2 CVEs
- CVE-2026-19445: prevent a use-after-free in server-side SSLContext SNI callbacks
- CVE-2026-19553: validate SSLContext.wrap_bio() hostname and server-side parameters
- CVE-2026-19553: validate SSLContext.wrap_bio() hostname and server-side parameters
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791572599.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-19445 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-19553 Vendor Advisory
Timeline
Published9 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1791572599 · OSV
Track software like this
Free during beta