Release date:
2026-10-27 11:09:55 UTC
Description:
- CVE-2026-115557: reject TLS chains that contain one of the compromised
eMudhra intermediate CA keys, by matching the SHA-256 digest of each
certificate's SubjectPublicKeyInfo against a built-in denylist in the
_ssl verify callback (backport of cpython gh-160040, GH-160042).
Updated packages:
-
alt-python38-3.8.20-32.el7.x86_64.rpm
sha:e1a8fbf08615224139ee9f5aa9c4cca326be33e8be652b459ced035ce8e1a0a1
-
alt-python38-debug-3.8.20-32.el7.x86_64.rpm
sha:adf6d6a751e6d8e0d23b1aa62fc6d50d4e04e350206689757b342b65b7952b7c
-
alt-python38-devel-3.8.20-32.el7.x86_64.rpm
sha:4ba4fe67a9e2bb2c8d302cd3cc003dff1eb18453f0bf61f40a8b84532ec763ae
-
alt-python38-idle-3.8.20-32.el7.x86_64.rpm
sha:6057d7748acd457cf412d9d2aed0bdf7fb25b7909b18a3c69268bb22f298cd17
-
alt-python38-libs-3.8.20-32.el7.x86_64.rpm
sha:99d8357762025d7b63a6884937eabdebe937b01f0102ee98e4236e15b146c6f9
-
alt-python38-test-3.8.20-32.el7.x86_64.rpm
sha:0cef7e7b0d731c9a8fd393908d79134ca93e25eae8aecd0c0f99b06ce7dfb10f
-
alt-python38-tkinter-3.8.20-32.el7.x86_64.rpm
sha:fc3d55b741588c4b21d7c8e28095e86b4a0bc316a0d217c3bed677b754c593b9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
