USN-9083-1: gevent vulnerability
Published Nov 12, 2026
·Updated
It was discovered that the gevent WSGI server incorrectly validated chunked transfer encoding trailers in HTTP requests. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks, leading to privilege escalation.
Affected Software
12 affected componentsFixes available
All of the following
ubuntu/python3-gevent<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=22.04
All of the following
ubuntu/python3-gevent<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/python-gevent<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/python3-gevent<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/python-gevent<1.1.0-2ubuntu0.1~esm1
1.1.0-2ubuntu0.1~esm1
Ubuntu Ubuntu=16.04
All of the following
ubuntu/python3-gevent<1.1.0-2ubuntu0.1~esm1
1.1.0-2ubuntu0.1~esm1
Ubuntu Ubuntu=16.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/python3-geventto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/python-geventto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/python-geventto a version that resolves this vulnerability.Fixed in 1.1.0-2ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/python3-geventto a version that resolves this vulnerability.Fixed in 1.1.0-2ubuntu0.1~esm1
Event History
Nov 12, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software