[CLSA-2026:1793350655] Fix CVE(s): CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-10-30 08:57:47 UTC
Description:
* SECURITY UPDATE: Trust in compromised eMudhra intermediate CA keys - debian/patches/CVE-2026-115557.patch: in Modules/_ssl.c, install a verify callback on every SSLContext that rejects certificate chains containing a certificate whose SubjectPublicKeyInfo SHA-256 digest is on the new Modules/_ssl/distrusted_spki.h denylist of compromised eMudhra intermediate CA keys (X509_V_ERR_CERT_REJECTED). Backport of upstream af52b41afa43 (gh-160040) - CVE-2026-115557
CVEs fixed:
Updated packages:
  • idle-python3.7_3.7.3-2+deb10u7+tuxcare.els11_all.deb
    sha:58c79e00fbff72e9f844320a45295aa58d64d174
  • libpython3.7_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:041567b81271f97766817f17bdacd3219b85b0fe
  • libpython3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:b45f223a76926ccb49b8f5d62b0965f76f3ffbec
  • libpython3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:d62d05604dd90486a11420b8babc51bc272b3b66
  • libpython3.7-stdlib_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:e68ad3a858e3e9471c9038483062eaddd36ba355
  • libpython3.7-testsuite_3.7.3-2+deb10u7+tuxcare.els11_all.deb
    sha:87570daad37f6d6488d913944b9156a93534fc46
  • python3.7_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:0ef1858f5d88e6ff74676d7452317339b408bb89
  • python3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:b7670131a53395ccd9632b5c5dba1971616a307e
  • python3.7-doc_3.7.3-2+deb10u7+tuxcare.els11_all.deb
    sha:97d5c5157598a02a625cc46e4e8bd340fb8d1f8c
  • python3.7-examples_3.7.3-2+deb10u7+tuxcare.els11_all.deb
    sha:e7090250f192f59607f463967fff9b3d29afa510
  • python3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:bdb1f055dbed98ea10edb2407c1d14c82918814e
  • python3.7-venv_3.7.3-2+deb10u7+tuxcare.els11_amd64.deb
    sha:9ea24d2c7c595241a97b2e26bb44cdb3feff4b8d
  • libpython3.7_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:cf5447ef5a1b6c253b6c267bf03d1a492dd740c2
  • libpython3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:b67306f9194d3baa15df50a56a63056283081989
  • libpython3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:ae508cdff36eaaa30af8f6d77ce69ecc371707ce
  • libpython3.7-stdlib_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:c1bef8a8f5d69ddabf9e5d8c3f04619e1feb1a2d
  • python3.7_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:a5a10f0772558e4970684cb447130e850c2843ba
  • python3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:3024e03cb5244996de01615ecfa8559b501db668
  • python3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:e3b49278fba41c9d17cd270b8db052772e3a13bf
  • python3.7-venv_3.7.3-2+deb10u7+tuxcare.els11_arm64.deb
    sha:388734c941421c90c096a72583b71c2c123e29f8
  • libpython3.7_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:b577cf22a8924ac90711009d741077fd1bc776ff
  • libpython3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:c0cba5de684becadca9d4d30caebbf5147427877
  • libpython3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:1cf00eb54ccbb3e724e5f2be7e6d942febe719a1
  • libpython3.7-stdlib_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:459e02f1573b9f68b20fba9a215b85b8ecb48750
  • python3.7_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:c7a65571792110fce6d0eb83588e5bfe0fbaac5b
  • python3.7-dev_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:8d656d5caec9454adf93a577253f58baeaaa16fd
  • python3.7-minimal_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:1db176d9028c33829e719ea7e6753828ee9ded42
  • python3.7-venv_3.7.3-2+deb10u7+tuxcare.els11_armel.deb
    sha:e6a4945e960b287172210d32b2700db2fb6060f1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.