CVE-2026-19445
Fixed in a distro release EPSS <1%CVSS 9.2
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create an SSLContext per connection or replace it while connections are open; servers that wrap their listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets sni_callback for the lifetime of the server. TLS clients are not affected.
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | python-unversioned-command | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3 | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-debug | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-devel | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-idle | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-libs | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-test | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3-tkinter | 3.12.15-1.el10_2 |
| AlmaLinux 10 | python3.14 | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-debug | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-devel | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-debug | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-devel | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-idle | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-libs | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-test | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-freethreading-tkinter | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-idle | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-libs | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-test | 3.14.8-1.el10_2 |
| AlmaLinux 10 | python3.14-tkinter | 3.14.8-1.el10_2 |
| AlmaLinux 8 | platform-python | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | platform-python-debug | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | platform-python-devel | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | python3-idle | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | python3-libs | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | python3-test | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | python3-tkinter | 3.6.8-79.el8_10.alma.1 |
| AlmaLinux 8 | python3.12 | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-debug | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-devel | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-idle | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-libs | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-rpm-macros | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-test | 3.12.15-2.el8_10 |
| AlmaLinux 8 | python3.12-tkinter | 3.12.15-2.el8_10 |
| AlmaLinux 9 | python3.12 | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-debug | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-devel | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-idle | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-libs | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-test | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.12-tkinter | 3.12.15-1.el9_8 |
| AlmaLinux 9 | python3.14 | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-debug | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-devel | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-debug | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-devel | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-idle | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-libs | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-test | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-freethreading-tkinter | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-idle | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-libs | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-test | 3.14.8-1.el9_8 |
| AlmaLinux 9 | python3.14-tkinter | 3.14.8-1.el9_8 |
| Alpine 3.21 | python3 | 3.12.15-r0 |
| Alpine 3.22 | python3 | 3.12.15-r0 |
| Alpine 3.23 | python3 | 3.12.15-r0 |
| Alpine 3.24 | python3 | 3.14.8-r0 |
| Debian 12 | pypy3 | no fix |
| Debian 12 | python3.11 | 3.11.2-6+deb12u9 |
| Debian 13 | pypy3 | no fix |
| Debian 13 | python3.13 | no fix |
| Debian 14 | pypy3 | no fix |
| Debian 14 | python3.13 | no fix |
| Debian 14 | python3.14 | 3.14.8-1 |
| Debian 14 | python3.15 | 3.15.0~rc3-1 |
| Red Hat Enterprise Linux 10.2 | python-unversioned-command | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3 | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-debug | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-devel | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-idle | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-libs | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-test | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3-tkinter | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.12 | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.12-debuginfo | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.12-debugsource | 0:3.12.15-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14 | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-debug | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-debuginfo | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-debugsource | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-devel | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-debug | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-devel | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-idle | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-libs | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-test | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-freethreading-tkinter | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-idle | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-libs | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-test | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | python3.14-tkinter | 0:3.14.8-1.el10_2 |
| Red Hat Enterprise Linux 8 | platform-python | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | platform-python-debug | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | platform-python-devel | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3 | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-debuginfo | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-debugsource | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-idle | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-libs | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-test | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3-tkinter | 0:3.6.8-79.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12 | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-debug | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-debuginfo | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-debugsource | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-devel | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-idle | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-libs | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-rpm-macros | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-test | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 8 | python3.12-tkinter | 0:3.12.15-2.el8_10 |
| Red Hat Enterprise Linux 9 | python3.12 | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-debug | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-debuginfo | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-debugsource | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-devel | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-idle | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-libs | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-test | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.12-tkinter | 0:3.12.15-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14 | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-debug | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-debuginfo | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-debugsource | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-devel | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-debug | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-devel | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-idle | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-libs | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-test | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-freethreading-tkinter | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-idle | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-libs | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-test | 0:3.14.8-1.el9_8 |
| Red Hat Enterprise Linux 9 | python3.14-tkinter | 0:3.14.8-1.el9_8 |
| Red Hat hummingbird 1 | python3.15 | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-debug | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-devel | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-debug | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-devel | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-idle | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-libs | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-test | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-freethreading-tkinter | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-idle | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-libs | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-test | 0:3.15.0~rc2-1.1.hum1 |
| Red Hat hummingbird 1 | python3.15-tkinter | 0:3.15.0~rc2-1.1.hum1 |
| Rocky Linux 10 | python3.12 | 0:3.12.15-1.el10_2 |
| Rocky Linux 10 | python3.14 | 0:3.14.8-1.el10_2 |
| Rocky Linux 8 | python3 | 0:3.6.8-79.el8_10.rocky.0 |
| Rocky Linux 8 | python3.12 | 0:3.12.15-2.el8_10 |
| Rocky Linux 9 | python3.12 | 0:3.12.15-1.el9_8 |
| Rocky Linux 9 | python3.14 | 0:3.14.8-1.el9_8 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310 | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310-core | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python310 | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python310-core | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python310 | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python310-core | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312 | 3.12.15-150600.3.71.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312-core | 3.12.15-150600.3.71.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python310 | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python310-core | 3.10.22-150400.4.129.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311 | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311-core | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311-documentation | 3.11.17-150400.9.105.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312 | 3.12.15-150600.3.71.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312-core | 3.12.15-150600.3.71.1 |
| Ubuntu 22.04 LTS | python3.10 | no fix |
| Ubuntu 24.04 LTS | python3.12 | no fix |
| Ubuntu 26.04 LTS | python3.14 | no fix |
| Ubuntu 26.10 | python3.14 | no fix |
| Ubuntu Pro 14.04 LTS | python2.7 | no fix |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 14.04 LTS | python3.5 | no fix |
| Ubuntu Pro 16.04 LTS | python2.7 | no fix |
| Ubuntu Pro 16.04 LTS | python3.5 | no fix |
| Ubuntu Pro 18.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | no fix |
| Ubuntu Pro 18.04 LTS | python3.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python2.7 | no fix |
| Ubuntu Pro 20.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python3.9 | no fix |
| Ubuntu Pro 22.04 LTS | python2.7 | no fix |
| Ubuntu Pro 22.04 LTS | python3.11 | no fix |
| openSUSE Tumbleweed | python310 | 3.10.22-1.1 |
| openSUSE Tumbleweed | python311 | 3.11.17-1.1 |
| openSUSE Tumbleweed | python312 | 3.12.15-1.1 |
| openSUSE Tumbleweed | python313 | 3.13.16-1.1 |
| openSUSE Tumbleweed | python314 | 3.14.8-1.1 |
| openSUSE Tumbleweed | python315 | 3.15.0~rc3-1.1 |