< back to search

gpp_maybe Security update for python-tornado6

SUSE-SLES-16.0-1089

This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (bsc#1268397).

Release Date

Jun 26 2026
References

Bugzilla: 1268395, 1268396, 1268397
CVEs: CVE-2026-49853, CVE-2026-49854, CVE-2026-49855
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 16.0 aarch64

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

Packages

python313-tornado6
Open source version of scalable, non-blocking web server that power FriendFeed

6.5-160000.5.1 lock rpm