Summary
It was discovered that Tornado incorrectly handled parsing of large
multipart request bodies. An attacker could possibly use this issue to
cause a denial of service. (CVE-2026-31958)
It was discovered that Tornado did not properly validate characters in
cookie values. An attacker could possibly use this issue to inject
arbitrary cookie attributes. (CVE-2026-35536)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | python-tornado | 6.4.0-1ubuntu0.5 |
| Ubuntu · 25.10 | python-tornado | 6.4.2-3ubuntu0.3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | python-tornado | 4.2.1-1ubuntu3.1+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | python-tornado | 4.5.3-1ubuntu0.2+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | python-tornado | 6.0.3+really5.1.1-3ubuntu0.1~esm5 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | python-tornado | 6.1.0-3ubuntu0.1~esm5 |