gpp_maybe Security update for python-tornado

SUSE-SLE-Module-Basesystem-15-SP7-2026-222

This update for python-tornado fixes the following issues: - CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905). - CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method (bsc#1254904).

• Release Date
  Jan 22 2026
• References
  Bugzilla: 1254904, 1254905
  CVEs: CVE-2025-67725, CVE-2025-67726
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  python-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock src

  python3-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  python-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock src

  python3-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  python-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock src

  python3-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  python-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock src

  python3-tornado
  Open source version of scalable, non-blocking web server that power FriendFeed

  4.5.3-150000.3.13.1 lock rpm