YR SoftwareYuri Reissaus

← Back to 2026-Nov

ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity

? CVE-2026-19552

What could go wrong?

Microsoft fixed a security weakness. Details are limited to avoid helping attackers.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

azl3 tensorflow 2.16.1-11 on Azure Linux 3.0, azl3 python-py 1.11.0-1 on Azure Linux 3.0, azl3 python3 3.12.16-1 on Azure Linux 3.0

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.