[CLSA-2026:1793102301] alt-python39: Fix of CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-27 11:58:32 UTC
Description:
- CVE-2026-115557: ssl now rejects certificate chains that contain one of eight compromised eMudhra intermediate CA keys; a new denylist of their SubjectPublicKeyInfo SHA-256 digests is enforced from a verify callback installed on every SSLContext.
CVEs fixed:
Updated packages:
  • alt-python39-3.9.23-32.el10.x86_64.rpm
    sha:44ffa98f264f5babe3b32e2d2aaab072250a89cd4a362f8ca2815bc9b300738d
  • alt-python39-debug-3.9.23-32.el10.x86_64.rpm
    sha:f2435c3c1530a01331de58ad216a0de7a60f445a68e68ab6dac14ebf2b26a4d8
  • alt-python39-devel-3.9.23-32.el10.x86_64.rpm
    sha:5e5fc8d237c14d2cadd238af3f2ee69fc9b0611847b13e9b480a7ee5186830d0
  • alt-python39-idle-3.9.23-32.el10.x86_64.rpm
    sha:fb9953e694e51d785296a96804d8a59d92d0ea56372d927ff82bb6be5db50b7b
  • alt-python39-libs-3.9.23-32.el10.x86_64.rpm
    sha:cae6e90abd2c9fac63bf254617d60e5ec3b0c59b578481b35df46434f2cd3284
  • alt-python39-test-3.9.23-32.el10.x86_64.rpm
    sha:3d75d68ce8ea70e6c258479d7a2696b577cc20d8905b5f7e465ea13b5cefee90
  • alt-python39-tkinter-3.9.23-32.el10.x86_64.rpm
    sha:04b7a7244944b0cdd369bec4afcd6d715c185013fbfd6712a5504b0b989a7a28
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.