< back to search

gpp_maybe Security update for python-tornado6

SUSE-SLE-Micro-6.1-157

This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Fixed excessive CPU consumption by the algorithm used for parsing HTTP cookies (bsc#1233668) - CVE-2025-47287: Fixed denial-of-service via generation of an extremely high volume of logs due to multipart/form-data parser (bsc#1243268)

Release Date

Jun 24 2025
References

Bugzilla: 1233668, 1243268
CVEs: CVE-2024-52804, CVE-2025-47287
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 ppc64le

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 s390x

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 aarch64

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

python311-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.4-slfo.1.1_2.1 lock rpm