Alerts This Week
Warning Icon 1 652
Alerts This Week
Warning Icon 1 652

Mageia 9 Python-Tornado Important Header Injection DoS Fix MGASA-2026-0092

mageia
Calendar Grey April 10, 2026
Dist Mageia Esm H88
Updated python-tornado packages address Header Injection and DoS issues in Mageia 9 for improved security.
MGASA-2026-0092 - Updated python-tornado packages fix security vulnerabilities

Summary

Description: Tornado vulnerable to Header Injection and XSS via reason argument. (CVE-2025-67724) Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing. (CVE-2025-67725) Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters. (CVE-2025-67726)

References

- https://bugs.mageia.org/show_bug.cgi?id=35326

- https://lists.debian.org/debian-security-announce/2026/msg00104.html

- https://www.cve.org/CVERecord?id=CVE-2025-67724

- https://www.cve.org/CVERecord?id=CVE-2025-67725

- https://www.cve.org/CVERecord?id=CVE-2025-67726

Topics%20covered

Topics Covered

security advisory XSS DoS important header injection Mageia

Resolution

SRPMS

- 9/core/python-tornado-6.3.2-1.3.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 10 Apr 2026
URL: https://advisories.mageia.org/MGASA-2026-0092.html
Type: security
CVE: CVE-2025-67724, CVE-2025-67725, CVE-2025-67726

Topics%20covered

Topics Covered

security advisory XSS DoS important header injection Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here