SUSE-SU-2026:5137-1: Security update for python
This update for python fixes the following issue:
- CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).
Other sources
This update for python fixes the following issue: CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/pythonto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-baseto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-docto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-baseto a version that resolves this vulnerability.Fixed in 32bit-2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-tkto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-cursesto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-develto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-xmlto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-curses-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-demoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-xml-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/pythonto a version that resolves this vulnerability.Fixed in 32bit-2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-gdbmto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-tk-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-base-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-gdbm-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-idleto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-base-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-2.7.18-33.96.1 - Upgrade
Upgrade
suse/python-doc-pdfto a version that resolves this vulnerability.Fixed in 2.7.18-33.96.1 - Upgrade
Upgrade
pythonto a version that resolves this vulnerability.Patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-5137