News
cybersecurity QNAP says hackers breaching NAS devices in Plex2Shell attacks - BleepingComputer cybersecurity Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time - The Hacker News cybersecurity Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot - The Hacker News vulnerability USN-8952-2: Tornado regression - Ubuntu Security Notices threat-intel Cyber Brief 26-11 - October 2026 - CERT-EU Threat Intelligence cybersecurity OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits - The Hacker News cybersecurity In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days - SecurityWeek cybersecurity Chainalysis says breach exposed credentials for all customers - BleepingComputer cybersecurity DigiCert Data Breach Impacts Business Customer Information - SecurityWeek cybersecurity Why Europe's Freezer Hacks Spread So Far, So Fast - Dark Reading cybersecurity OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line - SecurityWeek ai The Download: a humanoid cleans house and Samsung builds for the AI boom - MIT Technology Review cybersecurity Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack - SecurityWeek cybersecurity D-Link warns of multiple zero-days in DGS-3130 Series switches - BleepingComputer cybersecurity OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass - SecurityWeek
1 / 15
All news ›
Vulnerability

USN-8952-2: Tornado regression

Ubuntu Security Notices ·

USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter, and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls. (CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992, CVE-2026-103262, CVE-2026-103263)

Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter

The summary and image come from Ubuntu Security Notices; the image is shown from their website.