Release python-unversioned-command-3.12.15-1.el10_2 ALSA-2026:77020
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 30/100
Research direction
The issue lists Python 3.12 packages and two SSL-related CVEs, but names no repository files, tests, or implementation entry points. Start by identifying how AlmaLinux update issues map to package sources and security fixes; done means the listed Python update addresses both CVEs across the affected packages and architectures.
Written by the indexing model from the issue text.
Description
python3.12 security update
Severity: Important
Description
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
- python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() (CVE-2026-19553)
- python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
python-unversioned-command-3.12.15-1.el10_2.noarch
python3-3.12.15-1.el10_2.x86_64
python3-devel-3.12.15-1.el10_2.x86_64
python3-libs-3.12.15-1.el10_2.x86_64
python3-tkinter-3.12.15-1.el10_2.x86_64
python-unversioned-command-3.12.15-1.el10_2.noarch
python3-3.12.15-1.el10_2.s390x
python3-devel-3.12.15-1.el10_2.s390x
python3-libs-3.12.15-1.el10_2.s390x
python3-tkinter-3.12.15-1.el10_2.s390x
python-unversioned-command-3.12.15-1.el10_2.noarch
python3-3.12.15-1.el10_2.ppc64le
python3-devel-3.12.15-1.el10_2.ppc64le
python3-libs-3.12.15-1.el10_2.ppc64le
python3-tkinter-3.12.15-1.el10_2.ppc64le
python-unversioned-command-3.12.15-1.el10_2.noarch
python3-3.12.15-1.el10_2.aarch64
python3-devel-3.12.15-1.el10_2.aarch64
python3-libs-3.12.15-1.el10_2.aarch64
python3-tkinter-3.12.15-1.el10_2.aarch64
python3-debug-3.12.15-1.el10_2.x86_64
python3-idle-3.12.15-1.el10_2.x86_64
python3-test-3.12.15-1.el10_2.x86_64
python3-debug-3.12.15-1.el10_2.ppc64le
python3-idle-3.12.15-1.el10_2.ppc64le
python3-test-3.12.15-1.el10_2.ppc64le
python3-debug-3.12.15-1.el10_2.aarch64
python3-idle-3.12.15-1.el10_2.aarch64
python3-test-3.12.15-1.el10_2.aarch64
python3-debug-3.12.15-1.el10_2.s390x
python3-idle-3.12.15-1.el10_2.s390x
python3-test-3.12.15-1.el10_2.s390x
python3-3.12.15-1.el10_2.x86_64_v2
python3-devel-3.12.15-1.el10_2.x86_64_v2
python3-libs-3.12.15-1.el10_2.x86_64_v2
python3-tkinter-3.12.15-1.el10_2.x86_64_v2
python3-debug-3.12.15-1.el10_2.x86_64_v2
python3-idle-3.12.15-1.el10_2.x86_64_v2
python3-test-3.12.15-1.el10_2.x86_64_v2
python-unversioned-command-3.12.15-1.el10_2.noarch
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 5/5 Over a week Newbie friendliness 4/100
-
Difficulty 5/5 Over a week Newbie friendliness 5/100
All issues in AlmaLinux/updates
Similar issues
-
fix(knowledge): frame the video title and URL in the video-digest resume prompt as untrusted dataOpenneeds-human needs-triage
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
melodic-software/claude-code-plugins#6980 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 62/100
Maintainers usually reply within 1 day
-
effort:S priority:P2
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
SCA cis_ubuntu24-04 35664 / cis_ubuntu26-04 41664 "Ensure sudo log file exists": sudoers.d rule is missing the r: prefix, so it can never matchPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
security
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
pedrorchagas/blog-api#7 ·