Release date:
2026-10-27 08:21:00 UTC
Description:
- CVE-2026-115557: ssl accepted TLS chains signed by compromised eMudhra
intermediate CA keys. Modules/_ssl.c now installs a verify callback that
rejects any certificate whose SubjectPublicKeyInfo SHA-256 digest is on the
upstream denylist in Modules/_ssl_distrusted_spki.h (X509_V_ERR_CERT_REJECTED).
Updated packages:
-
alt-python27-2.7.18-46.el10.x86_64.rpm
sha:c2327975c318ce780c77c7002f9c5d67b589ab87e16ffa18d43fb3b56b7287d8
-
alt-python27-debug-2.7.18-46.el10.x86_64.rpm
sha:852811cf74d44fc764624c6e2c0c9e1cb134b40d5951c23609b43c745ddb3c31
-
alt-python27-devel-2.7.18-46.el10.x86_64.rpm
sha:b25348b01718eb6b151a5a0293409c7d9898a833a384fb8468ff03c7cbc48d30
-
alt-python27-libs-2.7.18-46.el10.x86_64.rpm
sha:287691684f304875812f9cdd345a2931333362de3aeae55ac7b0ea38330caded
-
alt-python27-test-2.7.18-46.el10.x86_64.rpm
sha:8297b0e7850e1ecbb6e77f5a93bde055fd16045c4032204b3b6b0e6058edd4c4
-
alt-python27-tkinter-2.7.18-46.el10.x86_64.rpm
sha:df74d9b153fd516b946b2cff31bcc48f116bc0ec57a748f69f8c99f490d52572
-
alt-python27-tools-2.7.18-46.el10.x86_64.rpm
sha:730169581b2c92b2092cb76d28f62a56c20f5dde0309a45f3cf38779d119c4e8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
