[CLSA-2026:1793102433] alt-python39: Fix of CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-27 12:00:45 UTC
Description:
- CVE-2026-115557: ssl now rejects certificate chains that contain one of eight compromised eMudhra intermediate CA keys; a new denylist of their SubjectPublicKeyInfo SHA-256 digests is enforced from a verify callback installed on every SSLContext.
CVEs fixed:
Updated packages:
  • alt-python39-3.9.23-32.el7.x86_64.rpm
    sha:6f046e20538941e9e924ecaee558770c4ad3861f878d35129064d1f728f51e99
  • alt-python39-debug-3.9.23-32.el7.x86_64.rpm
    sha:60e01dde6c173b3c5aca72f40ff421dcfbc2788a382efa853d361164816b16ea
  • alt-python39-devel-3.9.23-32.el7.x86_64.rpm
    sha:a67dd171a9fe83e02ce3d3245e8f562a136967e2702a02abb6e0a92cdb92c936
  • alt-python39-idle-3.9.23-32.el7.x86_64.rpm
    sha:c3153ec2e0349bd2b83c48163183e2efd4965b146e59dfed7e77a1f100fb171e
  • alt-python39-libs-3.9.23-32.el7.x86_64.rpm
    sha:9822d15579d2bc87d2ec53c9d097d58746c84e4e8a2f5e6cb16b295a71c1d15b
  • alt-python39-test-3.9.23-32.el7.x86_64.rpm
    sha:6608cc68cff717a845483ae8605c6d0adb018433dc178cf1e09597eaadac3eb6
  • alt-python39-tkinter-3.9.23-32.el7.x86_64.rpm
    sha:955db793834df0815dc225b3196f501d53611ee22b9fb1d6abe39572efefd6e9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.