Release date:
2026-10-27 08:24:13 UTC
Description:
- CVE-2026-115557: ssl accepted TLS chains signed by compromised eMudhra
intermediate CA keys. Modules/_ssl.c now installs a verify callback that
rejects any certificate whose SubjectPublicKeyInfo SHA-256 digest is on the
upstream denylist in Modules/_ssl_distrusted_spki.h (X509_V_ERR_CERT_REJECTED).
Updated packages:
-
alt-python27-2.7.18-46.el8.x86_64.rpm
sha:e3fd5cd90463d259e1d396d85853a33b75ed2a5f7294f7b4e2c5834f700d58c8
-
alt-python27-debug-2.7.18-46.el8.x86_64.rpm
sha:d825669218f378a989a16f693e7edce5c81098f53df1f847f03b36cc3b81bf5a
-
alt-python27-devel-2.7.18-46.el8.x86_64.rpm
sha:a216f53afac8a496917277a8d457e8df4880c5ca8c23124811739042d7c3bcd1
-
alt-python27-libs-2.7.18-46.el8.x86_64.rpm
sha:8636fafa24787ef3d57c258091fd611ba09c2ed306e3300c0398f77d73263645
-
alt-python27-test-2.7.18-46.el8.x86_64.rpm
sha:dbbc36e0e10eb740580cd6bf7641dc65a9ffcc115386b9f4f4b948bdc26a1060
-
alt-python27-tkinter-2.7.18-46.el8.x86_64.rpm
sha:8479105c200c519e2601f47de33c85e951e0f74ecfea9e66473eb1570cb0f0bc
-
alt-python27-tools-2.7.18-46.el8.x86_64.rpm
sha:1d996c39c6e134bd47ff42b1ceab95149e0d59534e2441cc71c63014bb96661a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
