[CLSA-2026:1793098250] alt-python37: Fix of CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-27 10:51:01 UTC
Description:
- CVE-2026-115557: ssl: reject TLS certificate chains that use any of the eight compromised eMudhra intermediate CA keys (SPKI SHA-256 denylist enforced from the _ssl verify callback).
CVEs fixed:
Updated packages:
  • alt-python37-3.7.17-33.el8.x86_64.rpm
    sha:d372124b70504c382ef4f51d4e208f505c088ee44e0b97a25a22a333e611d982
  • alt-python37-debug-3.7.17-33.el8.x86_64.rpm
    sha:9452a66aed19072d55cf5346dfccd1adca21ea8931eb87175785ffba8891e51f
  • alt-python37-devel-3.7.17-33.el8.x86_64.rpm
    sha:c016076c1b2d96644f23ed8200dfd9d2fd6d15208abf7ecc506b27e289703179
  • alt-python37-libs-3.7.17-33.el8.x86_64.rpm
    sha:4a820d96835a54f16f7177465aa5deba24c0199766cb18e051a77ae85b0b4d7d
  • alt-python37-test-3.7.17-33.el8.x86_64.rpm
    sha:658e91ff2dd92cd09b7fed2bb76c49dedfe0b7fb1e60d2cc38f54774242d2bb5
  • alt-python37-tkinter-3.7.17-33.el8.x86_64.rpm
    sha:86935e16392d1f445648d592b2ac08854b68a5c0c91ae94a641c80461d7ee497
  • alt-python37-tools-3.7.17-33.el8.x86_64.rpm
    sha:8598fcdf0a3d6873c6a072e2240ca4c1b1cc692c19f29d37b9adec1bfb1919d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.