[CLSA-2026:1793350441] Fix CVE(s): CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-30 08:54:13 UTC
Description:
* SECURITY UPDATE: TLS certificate chains signed by compromised eMudhra intermediate CA keys accepted by the ssl module - debian/patches/CVE-2026-115557.patch: reject certificates whose SubjectPublicKeyInfo SHA-256 digest is on a denylist of compromised keys in a verify callback in Modules/_ssl.c, add Modules/_ssl/distrusted_spki.h, add regression test - CVE-2026-115557
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.16-2+deb10u4+tuxcare.els10_all.deb
    sha:a06be22d67822c8756dc9fdca8030d7e83c975f0
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:7463e47859e0c98b39eaf0b35245642aa555fafe
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:e36ce35fa428980379281afeedf33bc143bcf6b7
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:8fd1289359eebc03ea2bd01466bf5604a2cc7e86
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:33273c31c5239705b0427a9b81384492dd0730b3
  • libpython2.7-testsuite_2.7.16-2+deb10u4+tuxcare.els10_all.deb
    sha:dde1678afadd9aa4597b864cb83442bbf159b54d
  • python2.7_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:b8300d68d69e9d16066e6d1252b0726a87ca6386
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:c34543af6cf9addf4a4207f82a53b52546f2f133
  • python2.7-doc_2.7.16-2+deb10u4+tuxcare.els10_all.deb
    sha:3aba30be7d98c95ef56014e333ca731eee872cac
  • python2.7-examples_2.7.16-2+deb10u4+tuxcare.els10_all.deb
    sha:f9897ddb082670fd6a7f3ec9718a5c23b48dc58b
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_amd64.deb
    sha:c88823455d64273cc86376dac72d650c9d787db4
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:dc4e7dcb88aa5d84b1378139080847d288a4bb14
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:d3039a01c4e3c7c4e0eb79e852887a34ab53ff20
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:4075971e711b9f0c6a23c60c20eb4a8121455a82
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:4322684d2083b00575f4d9c71c38a6a569e48609
  • python2.7_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:ffa5736d2d4e20cc5b7e189cbda833a92b56cadb
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:e34748512e5ec8d633767c8deaaeed057e45671e
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_arm64.deb
    sha:99a5672d0010bba4eeeb1d975e68fd471cd22b7f
  • libpython2.7_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:42f4bb3b09cb611e7655f8a31a0b976a16aa7c43
  • libpython2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:603ba4fc6686e35ad32688adf10c1e98b94c41bc
  • libpython2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:a14c27d4b75cd09eb19a6eaa1fbfd4b5cef3d47d
  • libpython2.7-stdlib_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:7894e609fe4f8e91d5840d106bcd4928066f2105
  • python2.7_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:97b13dd4f8a793aac30db55504cf5539733fd93a
  • python2.7-dev_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:c754dd9435cf04cf9c2237ffc07799902b067a6e
  • python2.7-minimal_2.7.16-2+deb10u4+tuxcare.els10_armel.deb
    sha:ccf287bb019cfb92b833a650dad1b7b92d1be356
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.