[ALSA-2026:82040] Important: python-tornado security update
Type:
security
Severity:
important
Release date:
2026-10-14
Description:
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient (CVE-2026-103262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 python3-tornado-6.5.10-1.el9_8.1.aarch64.rpm b5d38f08cb5dea535409310aa036ba1865fef2cc499d9107241d48729fcec9b1
ppc64le python3-tornado-6.5.10-1.el9_8.1.ppc64le.rpm 57e5999f9e6c0e79e85bcf59e723121f23112a16d90e5499fcf7d5dc0ad1719a
s390x python3-tornado-6.5.10-1.el9_8.1.s390x.rpm db977a489586f71028544146a867dfdc32969946d183e93a557214e0f70609c0
x86_64 python3-tornado-6.5.10-1.el9_8.1.x86_64.rpm bffbd0359f5e458aa0fcccf999ce09015d8c3aefeba30537e06032cfc339bb82
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.