Patch · 1 source · latest 3h

Ubuntu fixes Tornado update that broke static file serving in Jupyter

PATCHUbunturedteam/daily · 1 source

Severity: Medium
Sources: 1

What happened

Ubuntu's USN-8952-2 corrects a regression from USN-8952-1, which patched several Tornado vulnerabilities. The incomplete fix for CVE-2026-103263 broke static file serving for applications that subclass Tornado's StaticFileHandler, such as Jupyter. The original vulnerabilities could enable denial of service, information exposure or access control bypass.

For IT people · Written by AI from 1 source · Wrong?

What to do

Install the Ubuntu USN-8952-2 Tornado update, which replaces the incomplete USN-8952-1 fix.
Check that static file serving works in any Jupyter or other Tornado application after updating.

Written by AI from the sources, checked against them

Read the full story at the source