python-eventlet (0.40.3-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/openstack-team/third-party/python-eventlet.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/flamingo
Path: debian/changelog
Repo size: 729088
Browser: https://salsa.debian.org/openstack-team/third-party/python-eventlet
Last scan: 2025-09-01 09:26:25+00
Next scan: 2025-09-10 06:24:00+00
CI pipeline status: failed

Debian changelog in Git:

python-eventlet (0.40.3-1) experimental; urgency=medium

  * New upstream release:
    - Fixes CVE-2025-58068 (Eventlet WSGI parser is vulnerable to HTTP
      Request Smuggling due to improper handling of HTTP trailer section).
      (Closes: #1112515).

 -- Thomas Goirand <zigo@debian.org>  Sun, 31 Aug 2025 17:43:14 +0200

This branch is even with tag debian/0.40.3-1