< back to search

gpp_maybe Security update for python-tornado

SUSE-SUSE-MicroOS-5.2-2026-222

This update for python-tornado fixes the following issues: - CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905). - CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method (bsc#1254904).

Release Date

Jan 22 2026
References

Bugzilla: 1254904, 1254905
CVEs: CVE-2025-67725, CVE-2025-67726
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock rpm

SUSE Linux Enterprise Micro 5.2 s390x

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

Packages

python-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock src

python3-tornado
Open source version of scalable, non-blocking web server that power FriendFeed

4.5.3-150000.3.13.1 lock rpm