Skip to content
OpenAdvisories
High ELSA-2026-82040 1 CVE

Important: python-tornado security update (Oracle Linux 9)

Published Oct 13, 2026 · Updated Oct 13, 2026

Ecosystem: Oracle Linux

Summary

[6.5.10-1.1]
- Update to 6.5.10
Resolves: RHEL-274870

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3-tornado 0:6.5.10-1.el9_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-103262

    Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient

    Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that acc…

    tornadoweb tornado python-tornado python-tornado Debian Ubuntu Azure Linux PyPI