UnratedFix available
Fix CVE(s): CVE-2026-19445, CVE-2026-4786
Type: advisorySources: OSV
* SECURITY UPDATE: use-after-free in the ssl servername (SNI) callback (CVE-2026-19445) - debian/patches/CVE-2026-19445.patch: look the SSLContext up from the SSL object instead of the borrowed pointer registered with OpenSSL, hold references to it and to the callback while it runs, and unregister the callback when the SSLContext is deallocated in Modules/_ssl.c, so that a later ClientHello can no longer reach a released SSLContext; add a regression test to Lib/test/test_ssl.py and a note to Doc/library/ssl.rst - CVE-2026-19445
- Products
- idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal
- Affected versions
- Not specified
- Fixed versions
- 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
- CVEs
- CVE-2026-19445, CVE-2026-4786
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:42 UTC · Revision 1
Source evidence
* SECURITY UPDATE: use-after-free in the ssl servername (SNI) callback (CVE-2026-19445) - debian/patches/CVE-2026-19445.patch: look the SSLContext up from the SSL object instead of the borrowed pointer registered with OpenSSL, hold references to it and to the callback while it runs, and unregister the callback when the SSLContext is deallocated in Modules/_ssl.c, so that a later ClientHello can no longer reach a released SSLContext; add a regression test to Lib/test/test_ssl.py and a note to Doc/library/ssl.rst - CVE-2026-19445
osv:CLSA-2026-1791372827
idle-python2.7
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
libpython2.7
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
libpython2.7-dev
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
libpython2.7-minimal
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
libpython2.7-stdlib
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
libpython2.7-testsuite
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
python2.7
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
python2.7-dev
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
python2.7-doc
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
python2.7-examples
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
python2.7-minimal
Fixed versions: 2.7.17-1~18.04ubuntu1.11+tuxcare.els19
Complete source record
{
"id": "fd56d588a1cdddc68e80a640ef70d5410e2421938e8543ddd587c8eb7f622d3a",
"url": "https://osv.dev/vulnerability/CLSA-2026-1791372827",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Fix CVE(s): CVE-2026-19445, CVE-2026-4786",
"summary": "* SECURITY UPDATE: use-after-free in the ssl servername (SNI) callback (CVE-2026-19445) - debian/patches/CVE-2026-19445.patch: look the SSLContext up from the SSL object instead of the borrowed pointer registered with OpenSSL, hold references to it and to the callback while it runs, and unregister the callback when the SSLContext is deallocated in Modules/_ssl.c, so that a later ClientHello can no longer reach a released SSLContext; add a regression test to Lib/test/test_ssl.py and a note to Doc/library/ssl.rst - CVE-2026-19445",
"evidence": "osv:CLSA-2026-1791372827",
"products": [
{
"name": {
"value": "idle-python2.7",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpython2.7",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpython2.7-dev",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpython2.7-minimal",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpython2.7-stdlib",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpython2.7-testsuite",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2.7",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2.7-dev",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2.7-doc",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2.7-examples",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2.7-minimal",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1791372827",
"aliases": [
"CLSA-2026-1791372827"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "idle-python2.7",
"purl": "pkg:deb/tuxcare/idle-python2.7?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "libpython2.7",
"purl": "pkg:deb/tuxcare/libpython2.7?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "libpython2.7-dev",
"purl": "pkg:deb/tuxcare/libpython2.7-dev?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "libpython2.7-minimal",
"purl": "pkg:deb/tuxcare/libpython2.7-minimal?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "libpython2.7-stdlib",
"purl": "pkg:deb/tuxcare/libpython2.7-stdlib?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "libpython2.7-testsuite",
"purl": "pkg:deb/tuxcare/libpython2.7-testsuite?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "python2.7",
"purl": "pkg:deb/tuxcare/python2.7?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "python2.7-dev",
"purl": "pkg:deb/tuxcare/python2.7-dev?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "python2.7-doc",
"purl": "pkg:deb/tuxcare/python2.7-doc?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "python2.7-examples",
"purl": "pkg:deb/tuxcare/python2.7-examples?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.7.17-1~18.04ubuntu1.11+tuxcare.els19"
}
]
}
],
"package": {
"name": "python2.7-minimal",
"purl": "pkg:deb/tuxcare/python2.7-minimal?distro=ubuntu-18.04",
"ecosystem": "TuxCare:Ubuntu:18.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791372827.json"
}
}
],
"modified": "2026-10-26T09:32:04.286876158Z",
"provider": "osv",
"upstream": [
"CVE-2026-19445",
"CVE-2026-4786"
],
"references": [
"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791372827.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-19445",
"https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
]
},
"related_cves": [
{
"value": "CVE-2026-19445",
"evidence": "/upstream"
},
{
"value": "CVE-2026-4786",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449598,
"published_at": "2026-10-19T17:48:22+00:00"
}