Release date:
2026-10-27 08:18:33 UTC
Description:
- CVE-2026-115557: ssl accepted TLS chains signed by compromised eMudhra
intermediate CA keys. Modules/_ssl.c now installs a verify callback that
rejects any certificate whose SubjectPublicKeyInfo SHA-256 digest is on the
upstream denylist in Modules/_ssl_distrusted_spki.h (X509_V_ERR_CERT_REJECTED).
Updated packages:
-
alt-python27-2.7.18-46.el7.x86_64.rpm
sha:cf239155454176d96d9da58eafacf81f4a0136c40eb034b7fb790f95a76d343d
-
alt-python27-debug-2.7.18-46.el7.x86_64.rpm
sha:1d42b0e8df0d48b640f43ca4738ae62d3b908df50c7ec3a951c7284f47f05dd8
-
alt-python27-devel-2.7.18-46.el7.x86_64.rpm
sha:2ce800b5a486dc6b50e78ca4cf171e3d010601966298d3c879caa32a87d01035
-
alt-python27-libs-2.7.18-46.el7.x86_64.rpm
sha:37d125999352cb13e8b02649e49d0cd1c1e1283ac8ca4a2465a3352ede138ffe
-
alt-python27-test-2.7.18-46.el7.x86_64.rpm
sha:af33ad908b628c56c34720059611fc797ab9b4e7b07313d249180124b8e0907f
-
alt-python27-tkinter-2.7.18-46.el7.x86_64.rpm
sha:fa4596803e09db6e50e01d23c675ede95e0f82dff8782efb35c9469b04d62a8b
-
alt-python27-tools-2.7.18-46.el7.x86_64.rpm
sha:d9220fb4fe0dfe9a99680b6f88acf569d87292b5860bda7d1e5c4d81703cf10d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
