< back to search

gpp_maybe Security update for python-tornado6

SUSE-SLE-Micro-6.0-770

This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (bsc#1268397).

Release Date

Jun 26 2026
References

Bugzilla: 1268395, 1268396, 1268397
CVEs: CVE-2026-49853, CVE-2026-49854, CVE-2026-49855
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.0 s390x

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-6.1 lock rpm

SUSE Linux Micro 6.0 aarch64

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-6.1 lock rpm

SUSE Linux Micro 6.0 x86_64

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-6.1 lock rpm