Skip to content
OpenAdvisories
High · 7.5 CVE-2026-49855 EUVD-2026-44505GHSA-mgf9-4vpg-hj56PYSEC-2026-3389

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)

Published Jul 14, 2026 · Updated Jul 16, 2026 · Assigned by GitHub_M

Vendor: tornadoweb Product: tornado Package: mitmproxy Package: python-tornado Package: python-tornado Package: python-tornado Package: tornado Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an HTTPServer configured with decompress_request=True to consume effectively unlimited memory. This issue is fixed in version 6.5.6.

Affected products

VendorProductAffectedFixed
tornadoweb tornado < 6.5.6 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 python-tornado No fix yet —
Debian 13 python-tornado No fix yet —
Debian 12 python-tornado No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 python-tornado No fix yet —
Ubuntu 26.04 LTS python-tornado No fix yet —
Ubuntu 24.04 LTS python-tornado No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS python-tornado No fix yet —
Ubuntu Pro 20.04 LTS python-tornado No fix yet —
Ubuntu Pro 18.04 LTS python-tornado No fix yet —
Ubuntu Pro 16.04 LTS python-tornado No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 python-tornado +1 6.5.8-0.el10_2.1 RHSA-2026:67147
RHEL 9 python-tornado +1 6.5.8-0.el9_8.1 RHSA-2026:67146
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS python-tornado +1 6.5.8-0.el10_0.1 RHSA-2026:80741
RHEL 9.6 EUS python-tornado +1 6.4.2-2.el9_6.7 RHSA-2026:90283
RHEL 9.4 E4S python-tornado +1 6.5.10-0.el9_4.1 RHSA-2026:98107
RHEL 9.2 E4S python-tornado +1 6.5.10-0.el9_2.1 RHSA-2026:98106

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 python3-tornado 6.5.8-0.el10_2.1 ALSA-2026:67147
AlmaLinux 9 python3-tornado 6.5.8-0.el9_8.1 ALSA-2026:67146

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 python-tornado 6.5.8-0.el10_2.1 RLSA-2026:67147
Rocky Linux 9 python-tornado 6.5.8-0.el9_8.1 RLSA-2026:67146

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES 15 SP6 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES 15 SP6 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES 15 SP5 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES 15 SP5 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES 15 SP4 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES 15 SP4 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES 3 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
Show 25 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 python-tornado6 6.5-160000.5.1 SUSE-SU-2026:22373-1
SLES for SAP 15 SP6 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES for SAP 15 SP6 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES for SAP 15 SP5 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES for SAP 15 SP5 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES for SAP 15 SP4 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLES for SAP 15 SP4 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLES 16.0 python-tornado6 6.5-160000.5.1 SUSE-SU-2026:22373-1
SLE Micro 6.2 python-tornado6 6.5-160000.5.1 SUSE-SU-2026:22286-1
SLE Micro 6.1 python-tornado6 6.4-slfo.1.1_5.1 SUSE-SU-2026:22445-1
SLE Micro 6.0 python-tornado6 6.4-6.1 SUSE-SU-2026:22430-1
SLE Micro 5.5 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLE Micro 5.4 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLE Micro 5.3 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLE HPC 15 SP5 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLE HPC 15 SP5 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SLE HPC 15 SP4 python-tornado 4.5.3-150000.3.22.1 SUSE-SU-2026:2726-1
SLE HPC 15 SP4 python-tornado6 6.3.2-150400.9.18.1 SUSE-SU-2026:2725-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.15.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-80002.3.3.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-80002.5.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-80002.3.9.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.9.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-80002.4.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.12.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-70002.5.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-70002.4.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.2.5-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.2.10-120002.3.15.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.2.7-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.2.17-120002.3.18.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 venv-salt-minion 3006.0-120002.5.22.2 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10 scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE Manager Client Tools 12 python-tornado 4.2.1-17.21.1 SUSE-SU-2026:3291-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-100002.1.9.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-90002.5.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-90002.3.9.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.9.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-90002.4.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-tornado6 6.5.7-1.1 openSUSE-SU-2026:11027-1
openSUSE Leap 16.0 python-tornado6 6.5-160000.5.1 openSUSE-SU-2026:21067-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3-tornado +1 6.1.0-2.amzn2023.0.9 ALAS2023-2026-2016
Amazon Linux 2023 python3.13-tornado +1 6.4.2-1.amzn2023.0.4 ALAS2023-2026-2015
Amazon Linux 2 python-tornado +1 4.2.1-3.amzn2.0.6 ALAS2-2026-3847
Amazon Linux 2 python3-tornado +1 5.0.2-4.amzn2.0.9 ALAS2-2026-3846

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-tornado No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling mitmproxy 12.2.3-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tornado < 6.5.6 6.5.6 GHSA-mgf9-4vpg-hj56

Advisories 30

References