SUSE-SU-2026:20043-1

Security update for python-tornado6

Advisory ansehen veröffentlicht 2026-01-08

Security update for python-tornado6

beschreibt (3)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-67726US	—	0.53% (45th)	—	2025-12-12
Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing parameters for HTTP header values, potenti…
CVE-2025-67725US	—	0.56% (46th)	—	2025-12-12
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for…
CVE-2025-67724US	medium6.1	0.24% (15th)	—	2025-12-12
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers (where it could be…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SUSE Bug 1254903self
SUSE Bug 1254904self
SUSE Bug 1254905self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20043-1self
SUSE CVE CVE-2025-67724 pageself
SUSE CVE CVE-2025-67725 pageself
SUSE CVE CVE-2025-67726 pageself

Behebungen (9)

Behobenpython311-tornado6-0:6.4-4.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tornado6-0:6.4-4.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan