Linux · Security advisory · November 7, 2026

ELSA-2026-82041: python3-tornado security update

ELSA-2026-82041, released November 7, 2026, fixes 1 CVE in python3-tornado (version 0:6.5.10-1.el10_2.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile

Fixed package versions

ProductReleaseFixed in
python3-tornadool 100:6.5.10-1.el10_2.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-103262 python3-tornado: Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allo... 7.5 0.0063 None reported
Showing 1 to 1 of 1 1