< back to search

gpp_maybe Security update for python-tornado

SUSE-SLE-Micro-5.3-2026-1171

This update for python-tornado fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled values in other cookie attributes (bsc#1259630).

Release Date

Apr 2 2026
References

Bugzilla: 1254905, 1259553, 1259630
CVEs: CVE-2026-31958
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.3 s390x

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock rpm

SUSE Linux Enterprise Micro 5.3 aarch64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock rpm

SUSE Linux Enterprise Micro 5.3 x86_64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.19.1 lock rpm