Skip to content
OpenAdvisories
Medium USN-7772-1 1 CVE

python-eventlet vulnerability

Published Sep 24, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Eventlet incorrectly handled certain requests.
An attacker could possibly use this issue to bypass front-end security
controls, launch targeted attacks against active site users, and poison web
caches.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS python-eventlet 0.30.2-5ubuntu2.2
Ubuntu · 24.04 LTS 24.04:LTS python-eventlet 0.35.2-0ubuntu1.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS python-eventlet 0.25.1-2ubuntu1.1+esm2

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-58068

    Eventlet affected by HTTP request smuggling in unparsed trailers

    Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end…

    eventlet eventlet eventlet python-eventlet Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2025-58068
  • report
    https://launchpad.net/bugs/2125423