Skip to content
OpenAdvisories
High RHSA-2026:74587 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 2, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python-unversioned-command 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-debug 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-devel 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-idle 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-libs 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-test 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-tkinter 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-debug 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-devel 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-idle 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-libs 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-test 0:3.14.7-1.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-tkinter 0:3.14.7-1.3.hum1

Vulnerabilities 1

  • High 7.6
    CVE-2026-19553 Public exploit

    SSLContext.wrap_bio() missing validation of server_hostname parameter

    ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be si…

    Python Software Foundation CPython tensorflow python3.4 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-19553
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74587.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2544127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-19553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-19553
  • article
    https://github.com/python/cpython/issues/156793
  • article
    https://github.com/python/cpython/pull/158503
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/