Description:
Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.
Security Fix(es):
* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
python3-tornado-6.1.0-9.el9.aarch64.rpm |
e152cd88d0aa08deaa4e4b2e8a4a3577c3e73946e50be44473b9f2424251802f |
ppc64le |
python3-tornado-6.1.0-9.el9.ppc64le.rpm |
a02d7881aa771f15ea9e2cead94d325e1ff67c80d7e7e8efb92070714a3158f5 |
s390x |
python3-tornado-6.1.0-9.el9.s390x.rpm |
32710e95df7bba079c74bd01de777874a718f731f8c51478f70ddfeefc446b1b |
x86_64 |
python3-tornado-6.1.0-9.el9.x86_64.rpm |
f6886c4ec0cbcf8018aceaa88ee11d6ca09addfa7d561fea309471896042fab8 |