Release date:
2026-10-27 11:22:22 UTC
Description:
- CVE-2026-115557: reject TLS chains that contain one of the compromised
eMudhra intermediate CA keys, by matching the SHA-256 digest of each
certificate's SubjectPublicKeyInfo against a built-in denylist in the
_ssl verify callback (backport of cpython gh-160040, GH-160042).
Updated packages:
-
alt-python38-3.8.20-32.el9.x86_64.rpm
sha:948e50a0e954a10723cd1844fbc8416d4bddb20c18760af61e1ed5d81825af48
-
alt-python38-devel-3.8.20-32.el9.x86_64.rpm
sha:c6919028ed79e2c063bd3c8e68d5e4d44fc98939e38090fcdfc55ec2f9146b04
-
alt-python38-idle-3.8.20-32.el9.x86_64.rpm
sha:2592b0fce570a3507f4525181f0bb2909dff7c554ea2cf48b1350c5b0392c5d7
-
alt-python38-libs-3.8.20-32.el9.x86_64.rpm
sha:282f129fdc5deb59ec0797920070f67edcc7960faba6dce89274f54e862b02c6
-
alt-python38-test-3.8.20-32.el9.x86_64.rpm
sha:385617a792a585889006cdf4eb0db6b889070273361d7de46cc2015086df9d58
-
alt-python38-tkinter-3.8.20-32.el9.x86_64.rpm
sha:c5c8b4a2424b4f2636247e7b5469b36b338ddf5039cf1bd1a874d9990db7f17e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
