[CLSA-2026:1793102779] alt-python39: Fix of CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-27 15:06:28 UTC
Description:
- CVE-2026-115557: ssl now rejects certificate chains that contain one of eight compromised eMudhra intermediate CA keys; a new denylist of their SubjectPublicKeyInfo SHA-256 digests is enforced from a verify callback installed on every SSLContext.
CVEs fixed:
Updated packages:
  • alt-python39-3.9.23-32.el9.x86_64.rpm
    sha:8f8e1fc8833b1ca518d671f7b0549767fb5d6b422a082a0e4dd1759b0389923f
  • alt-python39-debug-3.9.23-32.el9.x86_64.rpm
    sha:34ab0bb3fc0028a784a2e0d21e9049be50d97f99a2dd2294ebba79ae0ec5bb78
  • alt-python39-devel-3.9.23-32.el9.x86_64.rpm
    sha:64a271f12aabf548bbc95e33bde64be7dbf60494f4f4c38c982dd942355dd816
  • alt-python39-idle-3.9.23-32.el9.x86_64.rpm
    sha:e8b4267bac666daa994a1a44ff9396f365508c785530741c84d89bcd983a3b57
  • alt-python39-libs-3.9.23-32.el9.x86_64.rpm
    sha:197645a228ebad8aa30d5d625baa33a1f253ec9e602abf11c3f307f4f193038a
  • alt-python39-test-3.9.23-32.el9.x86_64.rpm
    sha:5fcab8afa4112f740de3720f65cb9b2311dc82825b29ba49dc490bd6beb148da
  • alt-python39-tkinter-3.9.23-32.el9.x86_64.rpm
    sha:69daa49d9a8bec1f13d4b2684e3a4892c50ed3208e4b7f15b37052cb2cd89ca7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.