RHSA-2025:8135: Important: python-tornado security update
Important: python-tornado security update
Other sources
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.Security Fix(es): tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/python-tornadoto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1 - Upgrade
Upgrade
redhat/python-tornado-debugsourceto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1 - Upgrade
Upgrade
redhat/python3-tornadoto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1 - Upgrade
Upgrade
redhat/python3-tornado-debuginfoto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1 - Upgrade
Upgrade
redhat/python-tornado-debugsourceto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1.aa - Upgrade
Upgrade
redhat/python3-tornadoto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1.aa - Upgrade
Upgrade
redhat/python3-tornado-debuginfoto a version that resolves this vulnerability.Fixed in 6.4.2-1.el10_0.1.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:8135?
The severity of RHSA-2025:8135 is classified as important.
How do I fix RHSA-2025:8135?
To fix RHSA-2025:8135, update the python-tornado package to version 6.4.2-1.el10_0.1 or newer.
What versions of software are affected by RHSA-2025:8135?
RHSA-2025:8135 affects multiple versions of Red Hat Enterprise Linux and its architectures including IBM z Systems, Power, and ARM.
What packages are related to RHSA-2025:8135?
Related packages for RHSA-2025:8135 include python-tornado, python3-tornado, and their corresponding debug and debuginfo packages.
What is the main issue addressed by RHSA-2025:8135?
RHSA-2025:8135 addresses a security vulnerability in the python-tornado package.