[ALSA-2026:67147] Important: python-tornado security update
Type:
security
Severity:
important
Release date:
2026-09-15
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects (CVE-2026-49853) * tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption (CVE-2026-49855) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3-tornado-6.5.8-0.el10_2.1.aarch64.rpm 7de3767eabe2c5bf48b0e113f5aa38a23fc874ed8bb96e39c74850f3a21dc291
ppc64le python3-tornado-6.5.8-0.el10_2.1.ppc64le.rpm c500363b5643527cf09ee5ccb889073eb4a8983b4b60d1fc8540bbcf7fbf49b9
s390x python3-tornado-6.5.8-0.el10_2.1.s390x.rpm db63f918b298172aafb5864b8510c28c1f1b7c170dd19669186d146b17c1bdc9
x86_64 python3-tornado-6.5.8-0.el10_2.1.x86_64.rpm 0b17e1446d36a04e6896f2c7673c4d9bdd9ae5025fd0c939a5319cc6baf69410
x86_64_v2 python3-tornado-6.5.8-0.el10_2.1.x86_64_v2.rpm 9a15dd045d74c47feddceb0f5bbe7f9a52cc12b376c3dbcb4379040edc1e3045
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.