Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:4137-1

Опубликовано: 02 дек. 2024
Источник: suse-cvrf

Описание

Security update for python-tornado6

This update for python-tornado6 fixes the following issues:

  • CVE-2024-52804: Fixed a denial of service caused by quadratic performance of cookie parsing (bsc#1233668)

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest
python311-tornado6-6.3.2-150400.9.6.1
Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest
python311-tornado6-6.3.2-150400.9.6.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-BYOS-Azure
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-BYOS-EC2
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-BYOS-GCE
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-HPC-BYOS-Azure
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-HPC-BYOS-EC2
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-HPC-BYOS-GCE
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-Hardened-BYOS-Azure
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-Hardened-BYOS-EC2
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-Hardened-BYOS-GCE
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-BYOS-Azure
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-BYOS-EC2
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-BYOS-GCE
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
python311-tornado6-6.3.2-150400.9.6.1
Image proxy-salt-broker-image
python311-tornado6-6.3.2-150400.9.6.1
Image server-image-sles15sp7
python311-tornado6-6.3.2-150400.9.6.1
Image server-saline-image
python311-tornado6-6.3.2-150400.9.6.1
SUSE Linux Enterprise Module for Python 3 15 SP5
python311-tornado6-6.3.2-150400.9.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-tornado6-6.3.2-150400.9.6.1
openSUSE Leap 15.5
python311-tornado6-6.3.2-150400.9.6.1
openSUSE Leap 15.6
python311-tornado6-6.3.2-150400.9.6.1

Ссылки

Описание

Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests. Version 6.4.2 fixes the issue.

Затронутые продукты
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:python311-tornado6-6.3.2-150400.9.6.1
Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest:python311-tornado6-6.3.2-150400.9.6.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:python311-tornado6-6.3.2-150400.9.6.1
Image SLES15-SP7-BYOS-Azure:python311-tornado6-6.3.2-150400.9.6.1
Ссылки