openSUSE-SU-2026:20015-1

csafDEsuse_csaf

Security update for python-tornado6

view advisory published 2026-01-12

Security update for python-tornado6

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-67726US——
Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing parameters for HTTP header values, potenti…
CVE-2025-67725US——
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for…
CVE-2025-67724USmedium6.1—
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers (where it could be…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • Fixedpython313-tornado6-0:6.5-160000.3.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.aarch64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.ppc64le as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.s390x as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpython313-tornado6-0:6.5-160000.3.1.x86_64 as component of openSUSE Leap 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan