It was discovered that Tornado incorrectly handled a certain redirect. A remote attacker could possibly use this issue to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. This issue was only addressed in Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Ubuntu 16.04 LTS was previously addressed in USN-6159-1. (CVE-2023-28370)
It was discovered that Tornado inefficiently handled requests when parsing cookies. An attacker could possibly use this issue to increase resource utilization leading to a denial of service. (CVE-2024-52804)
{ "binaries": [ { "binary_name": "python-tornado", "binary_version": "4.5.3-1ubuntu0.2+esm1" }, { "binary_name": "python-tornado-dbgsym", "binary_version": "4.5.3-1ubuntu0.2+esm1" }, { "binary_name": "python-tornado-doc", "binary_version": "4.5.3-1ubuntu0.2+esm1" }, { "binary_name": "python3-tornado", "binary_version": "4.5.3-1ubuntu0.2+esm1" }, { "binary_name": "python3-tornado-dbgsym", "binary_version": "4.5.3-1ubuntu0.2+esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "python-tornado-doc", "binary_version": "6.0.3+really5.1.1-3ubuntu0.1~esm1" }, { "binary_name": "python3-tornado", "binary_version": "6.0.3+really5.1.1-3ubuntu0.1~esm1" }, { "binary_name": "python3-tornado-dbgsym", "binary_version": "6.0.3+really5.1.1-3ubuntu0.1~esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "python-tornado-doc", "binary_version": "6.1.0-3ubuntu0.1~esm1" }, { "binary_name": "python3-tornado", "binary_version": "6.1.0-3ubuntu0.1~esm1" }, { "binary_name": "python3-tornado-dbgsym", "binary_version": "6.1.0-3ubuntu0.1~esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "python-tornado-doc", "binary_version": "6.4.1-2ubuntu0.1" }, { "binary_name": "python3-tornado", "binary_version": "6.4.1-2ubuntu0.1" }, { "binary_name": "python3-tornado-dbgsym", "binary_version": "6.4.1-2ubuntu0.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "python-tornado-doc", "binary_version": "6.4.0-1ubuntu0.1" }, { "binary_name": "python3-tornado", "binary_version": "6.4.0-1ubuntu0.1" }, { "binary_name": "python3-tornado-dbgsym", "binary_version": "6.4.0-1ubuntu0.1" } ], "availability": "No subscription required" }