RHSA-2024:10590
RHSA-2024:10590 · Red Hat Security Advisory: python-tornado security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: python-tornado security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-tornado Red Hat:enterprise_linux:9::appstream
- Affected ranges
- ECOSYSTEM: < 0:6.4.2-1.el9_5
Update to 0:6.4.2-1.el9_5
python-tornado-debugsource Red Hat:enterprise_linux:9::appstream
- Affected ranges
- ECOSYSTEM: < 0:6.4.2-1.el9_5
Update to 0:6.4.2-1.el9_5
python3-tornado Red Hat:enterprise_linux:9::appstream
- Affected ranges
- ECOSYSTEM: < 0:6.4.2-1.el9_5
Update to 0:6.4.2-1.el9_5
python3-tornado-debuginfo Red Hat:enterprise_linux:9::appstream
- Affected ranges
- ECOSYSTEM: < 0:6.4.2-1.el9_5
Update to 0:6.4.2-1.el9_5
Original sources
- https://access.redhat.com/errata/RHSA-2024:10590
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2328045
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10590.json
- https://access.redhat.com/security/cve/CVE-2024-14029
- https://bugzilla.redhat.com/show_bug.cgi?id=2533918
- https://www.cve.org/CVERecord?id=CVE-2024-14029
- https://nvd.nist.gov/vuln/detail/CVE-2024-14029
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g
- https://www.vulncheck.com/advisories/tornado-before-6.4.1-http-request-smuggling-via-transfer-encoding
- https://access.redhat.com/security/cve/CVE-2024-52804
- https://www.cve.org/CVERecord?id=CVE-2024-52804
- https://nvd.nist.gov/vuln/detail/CVE-2024-52804
- https://github.com/advisories/GHSA-7pwv-g7hj-39pr
- https://github.com/tornadoweb/tornado/commit/d5ba4a1695fbf7c6a3e54313262639b198291533
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-8w49-h785-mj3c
- https://osv.dev/vulnerability/RHSA-2024:10590