Bugs fixes in "python-tornado"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-07 |
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-06 |
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-06 |
| CVE | CVE-2026-103263 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirmi | 2026-11-06 |
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-06 |
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-06 |
| CVE | CVE-2026-103263 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirmi | 2026-11-06 |
| Launchpad | 2172317 | python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook | 2026-11-06 |
| CVE | CVE-2026-103263 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirmi | 2026-10-22 |
| CVE | CVE-2026-103262 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause den | 2026-10-22 |
| CVE | CVE-2026-91992 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper s | 2026-10-22 |
| CVE | CVE-2026-91990 | Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_ | 2026-10-22 |
| CVE | CVE-2024-14029 | Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body a | 2026-10-22 |
| CVE | CVE-2026-103263 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirmi | 2026-10-22 |
| CVE | CVE-2026-103262 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause den | 2026-10-22 |
| CVE | CVE-2026-91992 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper s | 2026-10-22 |
| CVE | CVE-2026-91990 | Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_ | 2026-10-22 |
| CVE | CVE-2026-103263 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirmi | 2026-10-22 |
| CVE | CVE-2026-103262 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause den | 2026-10-22 |
| CVE | CVE-2026-91992 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper s | 2026-10-22 |
About
-
Send Feedback to @ubuntu_updates
