Every CVESearch/Get API key

SUSE-SU-2026:3160-1

Security update for python-tornado

No scoreFix available

SUSE-SU-2026:3160-1 is a vulnerability with no CVSS score yet in python-tornado, published July 21, 2026. No source lists public exploit code. Fixed in python-tornado 4.5.3-150000.3.25.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.5.3-150000.3.25.1python-tornado +3 more

Description

This update for python-tornado fixes the following issues:

  • GHSA-pw6j-qg29-8w7f: CurlAsyncHTTPClient leaks per-request credentials on handle reuse (bsc#1269012).

Affected packages

Affected packages
PackageAffectedFixed
python-tornado
SUSE:Linux Enterprise Micro 5.3
before 4.5.3-150000.3.25.1
4.5.3-150000.3.25.1
python-tornado
SUSE:Linux Enterprise Micro 5.4
before 4.5.3-150000.3.25.1
4.5.3-150000.3.25.1
python-tornado
SUSE:Linux Enterprise Micro 5.5
before 4.5.3-150000.3.25.1
4.5.3-150000.3.25.1
python-tornado
SUSE:Linux Enterprise Module for Basesystem 15 SP7
before 4.5.3-150000.3.25.1
4.5.3-150000.3.25.1

What each source reports

OSVNo score

Security update for python-tornado

This update for python-tornado fixes the following issues:

  • GHSA-pw6j-qg29-8w7f: CurlAsyncHTTPClient leaks per-request credentials on handle reuse (bsc#1269012).
Record
SUSE-SU-2026:3160-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open