This bug was fixed in the package python-tornado - 6.5.5-5ubuntu1.2
---------------
python-tornado (6.5.5-5ubuntu1.2) stonking-security; urgency=high
* SECURITY REGRESSION: Fix static file serving for StaticFileHandler
subclasses that override initialize() (LP: #2172317)
- debian/patches/regression-allowed-symlink-directory.patch: give
allowed_symlink_directory a class-level default and resolve it in
validate_absolute_path, fixing the AttributeError introduced by the
CVE-2026-103263 fix that broke Jupyter.
-- Chrisa Oikonomou <[email protected]> Wed, 04 Nov 2026
17:03:04 +0200
** Changed in: python-tornado (Ubuntu Stonking)
Status: Confirmed => Fix Released
** Changed in: python-tornado (Ubuntu Resolute)
Status: Incomplete => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172317
Title:
python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-tornado/+bug/2172317/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
