< back to search

gpp_maybe Security update for python-tornado

SUSE-SLE-Module-Basesystem-15-SP7-2026-2726

This update for python-tornado fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (bsc#1268397).

Release Date

Jul 2 2026
References

Bugzilla: 1268395, 1268396, 1268397
CVEs: CVE-2026-49853, CVE-2026-49854, CVE-2026-49855
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 aarch64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock rpm

Basesystem Module 15.7 ppc64le

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock rpm

Basesystem Module 15.7 s390x

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock rpm

Basesystem Module 15.7 x86_64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.22.1 lock rpm