[CLSA-2026:1793102607] alt-python39: Fix of CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-27 12:03:37 UTC
Description:
- CVE-2026-115557: ssl now rejects certificate chains that contain one of eight compromised eMudhra intermediate CA keys; a new denylist of their SubjectPublicKeyInfo SHA-256 digests is enforced from a verify callback installed on every SSLContext.
CVEs fixed:
Updated packages:
  • alt-python39-3.9.23-32.el8.x86_64.rpm
    sha:822c3fa353d0c851548b344ca62be891828ec7fd571b245d5bee6ec99477835b
  • alt-python39-debug-3.9.23-32.el8.x86_64.rpm
    sha:486787dcf235b214c1520f7c30a242bc35ca88764302349e8fdd5c9cc23c5b8c
  • alt-python39-devel-3.9.23-32.el8.x86_64.rpm
    sha:c45038412234902517f75f1fd3c80031d823d8965b814cc72cd22ba1e0f1fa5c
  • alt-python39-idle-3.9.23-32.el8.x86_64.rpm
    sha:76b2902d30d0d4102236d8fe803cc5d8fdf6c2c66a98c15d5a92226f91568fa2
  • alt-python39-libs-3.9.23-32.el8.x86_64.rpm
    sha:ade3d6d21589c779b71ed03a8f922cd36c943a86f65dde2a482bf006ef6c8d6d
  • alt-python39-test-3.9.23-32.el8.x86_64.rpm
    sha:db9fef1b1e58fc101e5b51b746bb42f7e7198b5a8792f59a954c7adce2a532fe
  • alt-python39-tkinter-3.9.23-32.el8.x86_64.rpm
    sha:8099bca46e6767c5e6e25f300337f83d46115d3c4d7b22c515f718bbb32f869d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.