< back to search

gpp_maybe Security update for python-tornado6

SUSE-SL-Micro-6.2-1089

This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (bsc#1268397).

Release Date

Jun 26 2026
References

Bugzilla: 1268395, 1268396, 1268397
CVEs: CVE-2026-49853, CVE-2026-49854, CVE-2026-49855
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 s390x

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Micro 6.2 ppc64le

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm