Skip to content
OpenAdvisories
Medium RHSA-2026:1959 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (python-eventlet) security update

Published Feb 13, 2026 · Updated Sep 9, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 18 openstack:18.0::el9 python-eventlet 0:0.33.1-7.el9ost
Red Hat · OpenStack 18 openstack:18.0::el9 python3-eventlet 0:0.33.1-7.el9ost

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-58068

    Eventlet affected by HTTP request smuggling in unparsed trailers

    Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end…

    eventlet eventlet eventlet python-eventlet Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2391958
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1959.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-58068
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-58068
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-58068
  • article
    https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb
  • article
    https://github.com/eventlet/eventlet/pull/1062
  • article
    https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7