< back to search

gpp_maybe Security update for python-tornado6
SUSE-SLE-Module-Python3-15-SP7-2026-10

This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead to DoS when processing a maliciously crafted HTTP request (bsc#1254905). - CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).

cloud_download Downloads

Python 3 Module 15.7 ppc64le
  • Packages
    python-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock src
    python311-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock rpm
Python 3 Module 15.7 s390x
  • Packages
    python-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock src
    python311-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock rpm
Python 3 Module 15.7 aarch64
  • Packages
    python-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock src
    python311-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock rpm
Python 3 Module 15.7 x86_64
  • Packages
    python-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock src
    python311-tornado6
    Open source version of scalable, non-blocking web server that power FriendFeed
    6.3.2-150400.9.12.1 lock rpm