Catalogue CVE

CVE-2025-67725

Tornado vulnerabilities

[Catalogue CVE]

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS). Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.

Gravité
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.56% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitypython-tornado6.4.2-3+deb13u2Fixed[CVE-2025-67725]
Debiantrixiepython-tornado6.4.2-3+deb13u2FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debiansidpython-tornado6.5.4-0.1FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debiansidpython-tornado6.5.5-5Fixed[CVE-2025-67725]
Debianforkypython-tornado6.5.4-0.1FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debianforkypython-tornado6.5.5-5Fixed[CVE-2025-67725]
Debianbookworm-securitypython-tornado6.2.0-3+deb12u4Fixed[CVE-2025-67725]
Debianbookwormpython-tornado6.2.0-3+deb12u4FixedDistribution-reported fixed boundary[CVE-2025-67725]

Showing 8 fix observations. All 48 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedpython-tornadoNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedpython-tornado6.4.0-1ubuntu0.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedpython-tornado-doc6.4.0-1ubuntu0.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedpython3-tornado6.4.0-1ubuntu0.4UnknownSource applicability is not establishedProvider not reported
PipRelease not reportedtornado6.5.3UnknownSource applicability is not establishedProvider not reported
Debianbookwormpython-tornado6.2.0-3+deb12u4FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debianbookworm-securitypython-tornado6.2.0-3+deb12u4Fixed[CVE-2025-67725]
Debianforkypython-tornado6.5.4-0.1FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debianforkypython-tornado6.5.5-5Fixed[CVE-2025-67725]
Debiansidpython-tornado6.5.4-0.1FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debiansidpython-tornado6.5.5-5Fixed[CVE-2025-67725]
Debiantrixiepython-tornado6.4.2-3+deb13u2FixedDistribution-reported fixed boundary[CVE-2025-67725]
Debiantrixie-securitypython-tornado6.4.2-3+deb13u2Fixed[CVE-2025-67725]
Suselinux enterprise high performance computing 15 sp4-espospython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise high performance computing 15 sp4-ltsspython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise high performance computing 15 sp5-espospython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise high performance computing 15 sp5-ltsspython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise micro 5.2python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise micro 5.3python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise micro 5.4python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise micro 5.5python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise module for basesystem 15 sp7python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server 15 sp4-ltsspython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server 15 sp5-ltsspython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server 15 sp6-ltsspython-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server for sap applications 15 sp4python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server for sap applications 15 sp5python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Suselinux enterprise server for sap applications 15 sp6python-tornado4.5.3-150000.3.13.1UnknownSource applicability is not established[SUSE-SU-2026:0222-1]
Susemanager client tools 12python-tornado4.2.1-17.13.1UnknownSource applicability is not established[SUSE-SU-2026:0623-1]
Ubuntu24.04python-tornado6.3.2-1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-1ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu24.04python-tornado6.4.0-1ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu25.10python-tornado6.4.2-1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu25.10python-tornado6.4.2-2UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu25.10python-tornado6.4.2-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu25.10python-tornado6.4.2-3UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntu25.10python-tornado6.4.2-3ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-3UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-3build1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-3ubuntu0.1~esm1UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-3ubuntu0.1~esm2UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Ubuntupropython-tornado6.1.0-3ubuntu0.1~esm4UnknownSource applicability is not established[UBUNTU-CVE-2025-67725]
Original provider fields
{
  "package_releases": [
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "sid",
      "version": "6.5.5-5"
    },
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "forky",
      "version": "6.5.5-5"
    },
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "trixie",
      "version": "6.4.2-3+deb13u2"
    },
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "trixie-security",
      "version": "6.4.2-3+deb13u2"
    },
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "bookworm",
      "version": "6.2.0-3+deb12u4"
    },
    {
      "name": "python-tornado",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "6.2.0-3+deb12u4"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1122661,
      "name": "python-tornado",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "6.5.4-0.1"
    },
    {
      "bug": 1122661,
      "name": "python-tornado",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "6.5.4-0.1"
    },
    {
      "bug": 1122661,
      "name": "python-tornado",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "6.4.2-3+deb13u2"
    },
    {
      "bug": 1122661,
      "name": "python-tornado",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "6.2.0-3+deb12u4"
    }
  ],
  "distribution_packages": [
    {
      "name": "python-tornado",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "fixed_version": "6.4.0-1ubuntu0.4",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado-doc",
      "fixed_version": "6.4.0-1ubuntu0.4",
      "applicability_unknown": true
    },
    {
      "name": "python3-tornado",
      "fixed_version": "6.4.0-1ubuntu0.4",
      "applicability_unknown": true
    },
    {
      "name": "tornado",
      "ecosystem": "pip",
      "fixed_version": "6.5.3",
      "applicability_unknown": true
    },
    {
      "name": "tornado",
      "ranges": [
        {
          "fixed": "6.5.3",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67725",
      "fixed_version": "6.5.3",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2025-67725",
      "provider_updated_at": "2026-10-07T20:10:01.970"
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp6-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.3-150000.3.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0222-1",
      "fixed_version": "4.5.3-150000.3.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0222-1",
      "provider_updated_at": "2026-03-23T04:52:01.778059Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.1-17.13.1"
            }
          ]
        }
      ],
      "release": "manager client tools 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:0623-1",
      "fixed_version": "4.2.1-17.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2026:0623-1",
      "provider_updated_at": "2026-02-26T16:16:55.748787Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.0-3ubuntu0.1~esm4"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "6.1.0-1build1",
        "6.1.0-2",
        "6.1.0-3",
        "6.1.0-3build1",
        "6.1.0-3ubuntu0.1~esm1",
        "6.1.0-3ubuntu0.1~esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-67725",
      "fixed_version": "6.1.0-3ubuntu0.1~esm4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-67725",
      "provider_updated_at": "2026-02-04T02:45:16.417782Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.0-1ubuntu0.4"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "6.3.2-1",
        "6.4.0-0ubuntu1",
        "6.4.0-1",
        "6.4.0-1build1",
        "6.4.0-1ubuntu0.1",
        "6.4.0-1ubuntu0.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-67725",
      "fixed_version": "6.4.0-1ubuntu0.4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-67725",
      "provider_updated_at": "2026-02-04T02:45:16.417782Z",
      "applicability_unknown": true
    },
    {
      "name": "python-tornado",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.4.2-3ubuntu0.2"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "6.4.2-1",
        "6.4.2-2",
        "6.4.2-2ubuntu1",
        "6.4.2-3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-67725",
      "fixed_version": "6.4.2-3ubuntu0.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-67725",
      "provider_updated_at": "2026-02-04T02:45:16.417782Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1122661]

OpenFactory catalog packages

L’association des paquets est en cours.

[Debian 12 (Bookworm)]

  • [python3-tornado]Inconnu

    Paquet source: [python-tornado]

    Détails (4)

    • 6.2.0-3+deb12u4 · amd64 · bookworm

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · arm64 · bookworm

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · amd64 · bookworm-security

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · arm64 · bookworm-security

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

  • [python-tornado-doc]Inconnu

    Paquet source: [python-tornado]

    Détails (4)

    • 6.2.0-3+deb12u4 · all · bookworm

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · all · bookworm

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · all · bookworm-security

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

    • 6.2.0-3+deb12u4 · all · bookworm-security

      Corrigée · Corrigée: 6.2.0-3+deb12u4

      usn · python-tornado · debian · bookworm; usn · python-tornado · debian · 12

[Debian 13 (Trixie)]

  • [python3-tornado]Inconnu

    Paquet source: [python-tornado]

    Détails (4)

    • 6.4.2-3+deb13u2 · amd64 · trixie

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · arm64 · trixie

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · amd64 · trixie-security

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · arm64 · trixie-security

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

  • [python-tornado-doc]Inconnu

    Paquet source: [python-tornado]

    Détails (4)

    • 6.4.2-3+deb13u2 · all · trixie

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · all · trixie

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · all · trixie-security

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

    • 6.4.2-3+deb13u2 · all · trixie-security

      Corrigée · Corrigée: 6.4.2-3+deb13u2

      usn · python-tornado · debian · 13

Observé:

Références

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]