Release date:
2026-10-27 08:28:15 UTC
Description:
- CVE-2026-115557: ssl accepted TLS chains signed by compromised eMudhra
intermediate CA keys. Modules/_ssl.c now installs a verify callback that
rejects any certificate whose SubjectPublicKeyInfo SHA-256 digest is on the
upstream denylist in Modules/_ssl_distrusted_spki.h (X509_V_ERR_CERT_REJECTED).
Updated packages:
-
alt-python27-2.7.18-46.el9.x86_64.rpm
sha:fcf429cabf320c8ea9676110b83bfab0db3fb3d84733e489251eda9029ce4361
-
alt-python27-debug-2.7.18-46.el9.x86_64.rpm
sha:88c6f883cad3ac9f4e58b45de1f6ef340d7444941edeae44b3f67a4c9d23ecda
-
alt-python27-devel-2.7.18-46.el9.x86_64.rpm
sha:72084f659625ef18321f6963b9b9a2aea1b4bca47a76fb0d15352573924f7b21
-
alt-python27-libs-2.7.18-46.el9.x86_64.rpm
sha:6dcddc42994c7510894de69effe167d39908d1c8c6a79b4c2d89cd59cf5a574e
-
alt-python27-test-2.7.18-46.el9.x86_64.rpm
sha:78e8683d4f4f7809cdb3809581685ac52ba8fcfd4e2a352325384025353e5e90
-
alt-python27-tkinter-2.7.18-46.el9.x86_64.rpm
sha:61e001a5298cc6dd59d78370a60a937d551e37563bf80b10d006cb51cf51cb60
-
alt-python27-tools-2.7.18-46.el9.x86_64.rpm
sha:8e7b0766b736e1db7b188ea91aa1672f874f821f1ad45f7b2b640bcae5bfe629
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
