Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

Tornado could be made to crash or expose sensitive information if it received specially crafted network traffic. Software Description: - python-tornado: scalable, non-blocking web server and tools Details: It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls. (CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992, CVE-2026-103262, CVE-2026-103263)

Tornado could be made to crash or expose sensitive information if it

received specially crafted network traffic.

Software Description:

- python-tornado: scalable, non-blocking web server and tools

It was discovered that Tornado did not properly handle certain HTTP requests

and network inputs. An attacker could possibly use these issues to cause a

denial of service, expose sensitive information, or bypass access controls.

(CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992,

CVE-2026-103262, CVE-2026-103263)

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.10 python3-tornado 6.5.5-5ubuntu1.1 Ubuntu 26.04 LTS python3-tornado 6.5.4-0.1ubuntu0.2 Ubuntu 24.04 LTS python3-tornado 6.4.0-1ubuntu0.6 Ubuntu 22.04 LTS python3-tornado 6.1.0-3ubuntu0.1~esm6 Available with Ubuntu Pro Ubuntu 20.04 LTS python3-tornado 6.0.3+really5.1.1-3ubuntu0.1~esm7 Available with Ubuntu Pro Ubuntu 18.04 LTS python3-tornado 4.5.3-1ubuntu0.2+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS python3-tornado 4.2.1-1ubuntu3.1+esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2023-54397, CVE-2024-14029, CVE-2026-103262, CVE-2026-103263,

CVE-2026-91990, CVE-2026-91992

Ubuntu Security Notice USN-8952-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases