[CLSA-2026:1793908049] Fix CVE(s): CVE-2026-115557
Type:
security
Severity:
Critical
Release date:
2026-11-05 19:47:44 UTC
Description:
* SECURITY UPDATE: TLS certificate chains signed by compromised eMudhra intermediate CA keys accepted by the ssl module - debian/patches/CVE-2026-115557.patch: reject certificates whose SubjectPublicKeyInfo SHA-256 digest is on a denylist of compromised keys in a verify callback in Modules/_ssl.c, add Modules/_ssl/distrusted_spki.h, add regression test - CVE-2026-115557
CVEs fixed:
Updated packages:
  • idle-python2.7_2.7.18-8+deb11u1+tuxcare.els8_all.deb
    sha:18f0157fd35d7532eb9280cd9a3c630fea4e9fce
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:94ec8c1649d85a98a0d2ba70bc370bf5ec146875
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:cc63c3128a05ff7097b54099de555dfc9f0619a3
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:ae1a6b5206a4464a3cc35b72801ed6204d1660b2
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:86edbc049fead2cb7aa1f2aca5fbc41ac0c59a7f
  • libpython2.7-testsuite_2.7.18-8+deb11u1+tuxcare.els8_all.deb
    sha:b34808cc49097ba159e135d2e0b3360eabb7aede
  • python2.7_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:b9e6919dcd5bb646756b3fe2cf9b29a769096b81
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:31afbc4459b05e85bc6b2e704e49f3e601d478e0
  • python2.7-doc_2.7.18-8+deb11u1+tuxcare.els8_all.deb
    sha:46241919a4bb4d77a8087db7150825f014cc2536
  • python2.7-examples_2.7.18-8+deb11u1+tuxcare.els8_all.deb
    sha:3194a5ac3705256dd8fd1a626684a0633471a5ab
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_amd64.deb
    sha:f1af9b497b995c3dc1f5e50072fc509fc29531b4
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:ba11234093165e904f66015a98ce224c18edbdf0
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:4ade7befc94a5541b840b39a78aea576d5d1e98a
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:43a8fe4c6e6c3df7771a947b787eb52771047dcc
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:b6b3abf8ce09634d14706345fb97a8814d55d1b7
  • python2.7_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:8704d20ecf194cb31d96509a6f5e8b0b8fb860f8
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:f40fe2082510c4cfb4f266c28a8de80b00d1b9b8
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_arm64.deb
    sha:005d8e7fd98fe7c7468bf96c3d1d69d77e612cdc
  • libpython2.7_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:8baf166bc18558eb8559dbbd24c78d3835eb40af
  • libpython2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:0fff998bc54a3777f694cd76d240f803b4dfdaa9
  • libpython2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:022aeff03a08b9bdf59d19d12478090efdcb3a0c
  • libpython2.7-stdlib_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:5e8be7ddebadedada38ffce422ec6171244e1764
  • python2.7_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:c3645862610a4725a18babea8fb7c5bb56d790ee
  • python2.7-dev_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:c8e87abd7572e9621a46c57680e0a4557fb56fd0
  • python2.7-minimal_2.7.18-8+deb11u1+tuxcare.els8_armel.deb
    sha:6f1a3deb11a6b91a2c561d1cc269e7d38880dc21
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.