[Git][security-tracker-team/security-tracker][master] "new" python-tornado issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b821cfd by Moritz Muehlenhoff at 2026-09-16T15:39:41+02:00
"new" python-tornado issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1102,7 +1102,8 @@ CVE-2024-14029 (Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunke
 CVE-2023-54398 (Yonyou U8 Cloud contains an unauthenticated Java deserialization vulne ...)
 	NOT-FOR-US: Yonyou
 CVE-2023-54397 (Tornado before 6.3.3 contains an HTTP request smuggling vulnerability  ...)
-	TODO: check
+	- python-tornado 6.4.0-1
+	NOTE: https://github.com/tornadoweb/tornado/security/advisories/GHSA-qppv-j76h-2rpx
 CVE-2026-92079 (Mitigation bypass in the Widget: Win32 component. This vulnerability w ...)
 	- firefox <not-affected> (Only affects Firefox on Windows)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92079



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b821cfd068452d23dccc39fa5cf418e80c734ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b821cfd068452d23dccc39fa5cf418e80c734ce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260916/b8992a1f/attachment.htm>