Threats tagged 'alsa-2026:89742'

A security update for Python 3.9 addresses multiple vulnerabilities including an arbitrary file deletion via a race condition during temporary directory cleanup (CVE-2026-12345), a certificate verification bypass due to missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553), and a use-after-free issue in server-side SSLContext when sni_callback switches contexts (CVE-2026-19445). These issues affect Python versions prior to 3.9.25-7.el9_8.6 and are rated as important by Red Hat. The update fixes these vulnerabilities to prevent potential exploitation.