Photon OS 5.0: Python3 PHSA-2024-5.0-92-0434

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0434. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

brew-view (>=2.4.0, <=2.4.21), fast-explain (>=0.0.49, <=0.0.91) +6 more potentially affected by CVE-2024-52804 via tornado (5.1.0)

tornado PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - brew-view =2.4.0, =0.0.49, =0.9.0.2, =0.1.2, =0.10.2, =0.5.23, =0.6.0 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +497 more potentially affected by CVE-2024-52804 via tornado (>=6.0.0b1, <=6.4.1)

tornado PYPI version =6.0.0b1, =0.0.0, =0.7.3, =1.0.0, =1.0.0, =1.3.0, =0.0.9.1, =0.20.0, =0.9.5, =22.5.13, =0.0.2, =0.1.0, =0.3.5, =0.3.7 and more Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2024-52804 via tornado (4.4.2)

tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

blackhole (>=0.0.0, <=1.8.1) potentially affected by CVE-2024-52804 via tornado (3.1.0)

tornado PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - blackhole =0.0.0, =1.8.1 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

pylocalsmtp (>=0.2.1, <=0.4.2) potentially affected by CVE-2024-52804 via tornado (3.0.1)

tornado PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - pylocalsmtp =0.2.1, =0.4.2 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

torext (0.10.0) potentially affected by CVE-2024-52804 via tornado (3.0.0)

tornado PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - torext 0.10.0 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

catsup (>=0.3.8, <=0.3.11), pylocalsmtp (>=0.5.0, <=1.0.0) +1 more potentially affected by CVE-2024-52804 via tornado (3.2.0)

tornado PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - catsup =0.3.8, =0.5.0, =0.1.1, =0.1.2 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

compactor (>=0.2.0, <=0.3.0), graphite-beacon (>=0.23.0, <=0.26.0) +1 more potentially affected by CVE-2024-52804 via tornado (4.1.0)

tornado PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - compactor =0.2.0, =0.23.0, =0.25.1, =0.25.4.2 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

bb8 (>=0.1.0, <=0.2.6), blackgate (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2024-52804 via tornado (4.3.0)

tornado PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bb8 =0.1.0, =0.1.0, =0.1.7, =0.3.4 - twitch-pybot 0.1.4.post2 - weditor 0.0.2.dev2 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-197...

gremlinpython (>=3.2.2rc1, <=3.3.0), shot-detector (>=0.0.4.dev68, <=0.0.5.dev3) +4 more potentially affected by CVE-2024-52804 via tornado (4.4.1)

tornado PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - gremlinpython =3.2.2rc1, =0.0.4.dev68, =0.1.0, =0.0.0, =0.0.1, =0.1.0, =0.1.6 Source cves: CVE-2024-52804 Source advisory: OSV:PYSEC-2026-1975...

MiracleLinux 9 : python-tornado-6.4.2-1.el9_5 (AXSA:2024-9436:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9436:01 advisory. python-tornado: Tornado has HTTP cookie parsing DoS vulnerability CVE-2024-52804 Tenable has extracted the preceding description block directly from the...

TencentOS Server 3: pcs (TSSA-2025:0813)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0813 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

RockyLinux 9 : pcs (RLSA-2025:2471)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:2471 advisory. python-tornado: Tornado has HTTP cookie parsing DoS vulnerability CVE-2024-52804 Tenable has extracted the preceding description block directly from the RockyLinu...

RLSA-2025:2471 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado: Tornado has HTTP cookie parsing DoS vulnerability CVE-2024-52804 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

TencentOS Server 4: python-tornado (TSSA-2024:0999)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0999 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Fedora: Security Advisory (FEDORA-2025-db6e9bb7fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-5320059879)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : python-tornado (2025-db6e9bb7fb)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-db6e9bb7fb advisory. This contains the backported fix for CVE-2024-52804 cookie parsing DoS vuln Tenable has extracted the preceding description block directly from the Fedora...

RLSA-2025:2872 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado: Tornado has HTTP cookie parsing DoS vulnerability CVE-2024-52804 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...