StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · python-tornado

`python-tornado` CVE matrix across Linux distros

43 CVEs tracked across 10 distro releases. Showing the 43 most-recent fix records.

Ecosystems with tracked fixes

Debian bookwormDebian bullseyeDebian trixieUbuntu bionicUbuntu focalUbuntu jammyUbuntu nobleUbuntu questingUbuntu resoluteUbuntu xenial

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2012-2374→ fixed in2.1.0-3
CVE-2013-2099→ fixed in2.4.1-3
CVE-2014-9720→ fixed in3.2.2-1
CVE-2023-28370→ fixed in6.1.0-1+deb11u1
CVE-2024-52804→ fixed in6.1.0-1+deb11u1
CVE-2025-47287→ fixed in6.1.0-1+deb11u2
CVE-2025-67724→ fixed in6.1.0-1+deb11u3
CVE-2025-67725→ fixed in6.1.0-1+deb11u3
+3 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Debian bookworm

Source: Debian

CVE-2012-2374→ fixed in2.1.0-3
CVE-2013-2099→ fixed in2.4.1-3
CVE-2014-9720→ fixed in3.2.2-1
CVE-2023-28370→ fixed in6.2.0-3+deb12u1
CVE-2024-52804→ fixed in6.2.0-3+deb12u1
CVE-2025-47287→ fixed in6.2.0-3+deb12u2
CVE-2025-67724→ fixed in6.2.0-3+deb12u4
CVE-2025-67725→ fixed in6.2.0-3+deb12u4
+1 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Debian trixie

Source: Debian

CVE-2012-2374→ fixed in2.1.0-3
CVE-2013-2099→ fixed in2.4.1-3
CVE-2014-9720→ fixed in3.2.2-1
CVE-2023-28370→ fixed in6.3.2-1
CVE-2024-52804→ fixed in6.4.2-1
CVE-2025-47287→ fixed in6.4.2-2
CVE-2025-67724→ fixed in6.4.2-3+deb13u2
CVE-2025-67725→ fixed in6.4.2-3+deb13u2
+1 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu bionic

Source: Ubuntu USN

CVE-2026-31958→ fixed in4.5.3-1ubuntu0.2+esm3USN-8198-1
CVE-2026-35536→ fixed in4.5.3-1ubuntu0.2+esm3USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu focal

Source: Ubuntu USN

CVE-2026-31958→ fixed in6.0.3+really5.1.1-3ubuntu0.1~esm5USN-8198-1
CVE-2026-35536→ fixed in6.0.3+really5.1.1-3ubuntu0.1~esm5USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu jammy

Source: Ubuntu USN

CVE-2026-31958→ fixed in6.1.0-3ubuntu0.1~esm5USN-8198-1
CVE-2026-35536→ fixed in6.1.0-3ubuntu0.1~esm5USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu noble

Source: Ubuntu USN

CVE-2026-31958→ fixed in6.4.0-1ubuntu0.5USN-8198-1
CVE-2026-35536→ fixed in6.4.0-1ubuntu0.5USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu questing

Source: Ubuntu USN

CVE-2026-31958→ fixed in6.4.2-3ubuntu0.3USN-8198-1
CVE-2026-35536→ fixed in6.4.2-3ubuntu0.3USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu xenial

Source: Ubuntu USN

CVE-2026-31958→ fixed in4.2.1-1ubuntu3.1+esm3USN-8198-1
CVE-2026-35536→ fixed in4.2.1-1ubuntu3.1+esm3USN-8198-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Ubuntu resolute

Source: Ubuntu USN

CVE-2026-31958→ fixed in6.5.4-0.1ubuntu0.1USN-8198-2
CVE-2026-35536→ fixed in6.5.4-0.1ubuntu0.1USN-8198-2

Single command to patch all of these:

sudo apt-get install --only-upgrade -y python-tornado

Is YOUR python-tornado patched?

5-second check on your actual server. The quickscan reads your installed python-tornado version and matches against the same 43-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)