Benoit Chesneau 4062a82ba7 eventlet: Require eventlet 0.40.3+ for security fixes ...

Upgrade minimum eventlet version to 0.40.3 to address security
vulnerabilities:

- CVE-2021-21419 (Moderate 6.9): Websocket memory exhaustion via
  large/compressed frames (fixed in 0.31.0)
- CVE-2025-58068 (Moderate 6.3): HTTP Request Smuggling via improper
  trailer handling (fixed in 0.40.3)

Also restructure module to call monkey_patch() at import time for
better patching coverage, while keeping hubs.use_hub() in the worker's
patch() method since it creates OS resources that don't survive fork.

Add comprehensive tests for the eventlet worker.

2026-01-23 00:25:50 +01:00

..

__init__.py

Use socket.sendfile() instead of os.sendfile().

2020-01-04 06:31:25 -06:00

test_geventlet.py

eventlet: Require eventlet 0.40.3+ for security fixes

2026-01-23 00:25:50 +01:00

test_ggevent.py

gevent: Require gevent 23.9.0+ for security fixes

2026-01-23 00:14:11 +01:00