Release date:
2026-10-27 11:24:43 UTC
Description:
- CVE-2026-115557: reject TLS chains that contain one of the compromised
eMudhra intermediate CA keys, by matching the SHA-256 digest of each
certificate's SubjectPublicKeyInfo against a built-in denylist in the
_ssl verify callback (backport of cpython gh-160040, GH-160042).
Updated packages:
-
alt-python38-3.8.20-32.el10.x86_64.rpm
sha:b356c883689ede89bba5188e8abdf2948aa4f85037b38278911175d6fe7ce019
-
alt-python38-devel-3.8.20-32.el10.x86_64.rpm
sha:ccd6c2bdd73af90f43056e79352a7f998c3b143abacc5cf2c5880d4f5329f47d
-
alt-python38-idle-3.8.20-32.el10.x86_64.rpm
sha:2723ce3b31c4bf8f1c6d6b09b6cfa579ef4facbf5db224a5537d1beaf283271e
-
alt-python38-libs-3.8.20-32.el10.x86_64.rpm
sha:58742f085a3ad2be87dca833c5273a90f052d1ed087aa36ca36d0181a3d568b7
-
alt-python38-test-3.8.20-32.el10.x86_64.rpm
sha:f689ca2120cd57b9f930a119edf02771bb192ae7592d7d03dfafc5c46221abb3
-
alt-python38-tkinter-3.8.20-32.el10.x86_64.rpm
sha:b7269166c7382e40e71823e621cdc2045c8be327f3aaaa331698e0b0b2eafe79
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
