CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/py-tornado 6.5.10

Python Web Server from FriendFeed

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 6.5.10
Upstream
Higher version available: 6.6.0
Last update
to 6.5.10 · caff98b5b2
Quarterly
2026Q4: 6.5.10
WWW
https://www.tornadoweb.org/
Links
cgit · VuXML

Install

Package
# pkg install py312-tornado
installs 6.5.10 from latest; from quarterly (2026Q4) 6.5.10
Port
# cd /usr/ports/www/py-tornado && make install clean
Size
889 KiB download · 6.0 MiB installed
Depends on
lang/python312 3.12.15
License
APACHE20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 166.5.106.5.10–
FreeBSD 156.5.106.5.10–
FreeBSD 146.5.106.5.106.5.10

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 156.5.106.5.10–
FreeBSD 146.5.106.5.106.5.10

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 6.5.10.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-823977.52026-08-31Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (83)

Grzegorz Blach (gblach) · 4.2.1
Take maintainership

PR:		202925
Submitted by:	Guixing (khsing.cn <at> gmail <dot> com)
def1eb5568
Grzegorz Blach (gblach) · 4.2.1
Update to 4.2.1

PR:		202100
Approved by:	maintainer timeout
92b3e4dc67
Ruslan Makhmatkhanov (rm) · 4.2_1
www/py-tornado: remove py-backports.ssl_match_hostname dependency

since python 2.7.9 ssl.match_hostname() function is in standard library, so
there is no need to depend on security/py-backports.ssl_match_hostname anymore
as stated in tornado's setup.py:

"""
  if sys.version_info < (3, 2):
      install_requires.append('backports.ssl_match_hostname')
  if sys.version_info < (3, 4):
      # Certifi is also optional on 2.7.9+, although making our dependencies
      # conditional on micro version numbers seems like a bad idea
      # until we have more declarative metadata.
      install_requires.append('certifi')
"""

Remove this dependency and bump PORTREVISION.
While here sort USE_PYTHON components, add missed space in Makefile header.

PR:		201050
Submitted by:	rm (myself)
Approved by:	Guixing Bai <khsing.cn@gmail.com> (maintainer)
c321f4845e
Grzegorz Blach (gblach) · 4.2
Update to 4.2

PR:		200516
Approved by:	khsing.cn <at> gmail <dot> com (maintainer)
3400023ee5
Antoine Brodin (antoine) · 4.1_1
Switch PYTHON_REL from a 3 digits number to a 4 digits number to handle python 2.7.10

Differential Revision:	https://reviews.freebsd.org/D2639
Reviewed by:	sunpoet, mva
1b85bc9332
Ruslan Makhmatkhanov (rm) · 4.1_1
Chase py-certifi rename, bump PORTREVISION.
3bd94b2f6f
Grzegorz Blach (gblach) · 4.1
Update to 4.1

PR:		197973
Submitted by:	maintainer (khsing.cn <at> gmail <dot> com)
40faa9fc41
Marcus von Appen (mva) · 4.0.2
- Convert USE_PYTHON to new USES in www/

With hat:	python@
1b0994ee1e
Grzegorz Blach (gblach) · 4.0.2
- Update to 4.0.2

PR:		193647
Approved by:	khsing.cn@gmail.com (maintainer)
91629f2f29
Grzegorz Blach (gblach) · 4.0.1
- Update to 4.0.1

PR:		192713
Approved by:	khsing.cn@gmail.com (maintainer)
bca8df8eab
Grzegorz Blach (gblach) · 4.0
- Update to 4.0

PR:		191425
Approved by:	maintainer timeout
9b93fc36ca
Grzegorz Blach (gblach) · 3.2.1
- Update to 3.2.1

Approved by:	Guixing <khsing.cn@gmail.com> (maintainer)
16e52e4f53
Grzegorz Blach (gblach) · 3.2
- Update to 3.2

Approved by:	Guixing <khsing.cn@gmail.com> (maintainer)
d6dbb867bf
Martin Wilke (miwi) · 3.1_1
- Convert to autoplist - Stage support - Bump PORTREVISION
21856a5612
Olli Hauer (ohauer) · 3.1
- rename AL2 to APACHE20 in Mk/bsd.licenses.db.mk - svn move Templates/Licenses/AL2 Templates/Licenses/APACHE20 - add APACHE10 and APACHE11 to Mk/bsd.licenses.db.mk - add entry in UPDATING - bulk change all ports AL2 => APACHE20

- math/openfst/pkg-plist: remove share/licenses/openfst-1.3.4

PR:		ports/184785
Submitted by:	ohauer
Reviewed by:	tabthorpe
Approved by:	portmgr (tabthorpe@)
4fb1cfb1cd
Baptiste Daroussin (bapt) · 3.1
Add NO_STAGE all over the place in preparation for the staging support (cat: www)
85fbf21ec5
Grzegorz Blach (gblach) · 3.1
- Fix pkg-plist

Approved by:	crees (mentor)
c004b6e8a4
Grzegorz Blach (gblach) · 3.1
- Update to 3.1

PR:		ports/180556
Approved by:	crees (mentor), Guixing <khsing.cn@gmail.com> (maintainer)
952c251f23
Ruslan Makhmatkhanov (rm) · 3.0.2
- update to 3.0.2 - switch to CHEESESHOP

PR:		179099
Submitted by:	araujo
Approved by:	Guixing <khsing.cn@gmail.com> (maintainer)
8e6858f93f
Ruslan Makhmatkhanov (rm) · 3.0.1
- update to 3.0.1 - change USE_PYTHON to ``yes'' (both python branches are supported) - depend on py-curl only if python2 is used (it doesn't work with python3)

PR:		178234
Submitted by:	gblach
Approved by:	Guixing <khsing.cn@gmail.com> (maintainer)
784afb5487
Wesley Shields (wxs) · 2.4.1
Update to 2.4.1. Trim header. Switch to USE_GITHUB. Add a regression-test target.

PR:		ports/173714
Submitted by:	Grzegorz Blach <magik@roorback.net>
Approved by:	maintainer
Feature safe:	yes
8a613936e3
Martin Wilke (miwi) · 2.3
- Update to 2.3

PR:		168664
Submitted by:	koobs <koobs.freebsd@gmail.com>
Approved by:	maintainer timeout
7523420fb3
Jason Helfman (jgh) · 2.2
- Update to 2.2

PR:     ports/165788
Submitted by:   freebsd@nagilum.org
Approved by:    maintainer, khsing.cn@gmail.com
90713f37a3
Thomas Abthorpe (tabthorpe) · 2.1
- The proper acronym for Apache Software License 2 is really AL2 - Thanks to crees@ for generating the initial patch

PR:		ports/163521
Submitted by:	Pedro Giffuni <pfg apache.org>
Hat:		portmgr
Exp run by:	pav
e0ac1afbf4
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.1
- Update to 2.1 - Restrict USE_PYTHON range

Changes:	http://www.tornadoweb.org/documentation/releases/v2.1.0.html
		http://www.tornadoweb.org/documentation/releases/v2.0.0.html
PR:		ports/161235
Submitted by:	sunpoet (myself)
Approved by:	khsing <khsing.cn@gmail.com> (maintainer)
059225950a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.2.1_1
- Fix the copy/paste space/tab portlint warning
bf38b776ba
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.2.1_1
- Set py-simplejson as conditional dependency - Bump PORTREVISION for dependency change - Update pkg-descr

PR:		ports/160859
Submitted by:	Ruslan Mahmatkhanov <cvs-src@yandex.ru>
Approved by:	khsing <khsing.cn@gmail.com> (maintainer)
4444ffe430
Wen Heping (wen) · 1.2.1
- Update to 1.2.1

PR:		ports/156652
Submitted by:	Zhihao Yuan <lichray@gmail.com>
Approved by:	maintainer(timeout, > 14 days)
624023af8f
Martin Wilke (miwi) · 1.1
- Get Rid MD5 support
a9481afc8a
Li-Wen Hsu (lwhsu) · 1.1
- Update to 1.1

PR:		ports/150962
Submitted by:	lwhsu
Approved by:	khsing <khsing.cn AT gmail.com> (maintainer)
0e209baf7e
Li-Wen Hsu (lwhsu) · 1.0.1
- Update to 1.0.1

PR:		ports/149862
Submitted by:	lwhsu
Approved by:	khsing <khsing.cn AT gmail.com> (maintainer)
6b65621da3
Martin Wilke (miwi) · 0.2
- Update to 0.2

PR:		139639
Submitted by:	Bai Guixing <khsing.cn@gmail.com> (maintainer)
cc859289d3
Yi-Jheng Lin (yzlin) · 0.1
Add py-tornado 0.1, python Web Server from FriendFeed.

PR:		ports/138802
Submitted by:	Guixing Bai<khsing.cn at gmail.com>
Approved by:	rafan (co-mentor)
021bb9a90a