Описание
Security update for python-tornado6
This update for python-tornado6 fixes the following issues
- CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395).
- CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396).
- CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (bsc#1268397).
Список пакетов
openSUSE Leap 16.0
python313-tornado6-6.5-160000.5.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1268395
- SUSE Bug 1268396
- SUSE Bug 1268397
- SUSE CVE CVE-2026-49853 page
- SUSE CVE CVE-2026-49854 page
- SUSE CVE CVE-2026-49855 page
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:python313-tornado6-6.5-160000.5.1
Ссылки
- CVE-2026-49853
- SUSE Bug 1268395
- SUSE Bug 1268456
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:python313-tornado6-6.5-160000.5.1
Ссылки
- CVE-2026-49854
- SUSE Bug 1268396
- SUSE Bug 1268458
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:python313-tornado6-6.5-160000.5.1
Ссылки
- CVE-2026-49855
- SUSE Bug 1268397