SUSE-SU-2025:01732-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-202501732-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:01732-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:01732-1
Related
Published
2025-05-28T14:44:51Z
Modified
2025-05-29T12:16:33.135264Z
Upstream
Summary
Security update for python-tornado
Details

This update for python-tornado fixes the following issues:

  • CVE-2025-47287: excessive logging when parsing malformed multipart/form-data can lead to a denial-of-service (bsc#1243268).
References

Affected packages

SUSE:Manager Client Tools 12 / python-tornado

Package

Name
python-tornado
Purl
pkg:rpm/suse/python-tornado&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.1-17.10.1

Ecosystem specific

{
    "binaries": [
        {
            "python3-tornado": "4.2.1-17.10.1",
            "python-tornado": "4.2.1-17.10.1"
        }
    ]
}