This bug was fixed in the package python-tornado - 6.4.0-1ubuntu0.7
---------------
python-tornado (6.4.0-1ubuntu0.7) noble-security; urgency=high
* SECURITY REGRESSION: Fix static file serving for StaticFileHandler
subclasses that override initialize() (LP: #2172317)
- debian/patches/regression-allowed-symlink-directory.patch: give
allowed_symlink_directory a class-level default and resolve it in
validate_absolute_path, fixing the AttributeError introduced by the
CVE-2026-103263 fix that broke Jupyter.
-- Chrisa Oikonomou <[email protected]> Wed, 04 Nov 2026
17:03:12 +0200
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172317
Title:
python3-tornado 6.5.4-0.1ubuntu0.2 breaks Jupyter Notebook
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-tornado/+bug/2172317/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
