diff --git a/eventlet-0.40.2.tar.gz b/eventlet-0.40.2.tar.gz
deleted file mode 100644
index 023b86d55e4098c4a42a5d2474a2ab67a780df9f..0000000000000000000000000000000000000000
Binary files a/eventlet-0.40.2.tar.gz and /dev/null differ
diff --git a/eventlet-0.40.3.tar.gz b/eventlet-0.40.3.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..31fe010f6cf97075ddbbe38ca44ce577c694be4a
Binary files /dev/null and b/eventlet-0.40.3.tar.gz differ
diff --git a/python-eventlet.spec b/python-eventlet.spec
index edcb8d723b1b73ec862dfd6aba1cd696b76f19dd..e52b2b5da2a532d784dd64fc950bc666d3c5143e 100644
--- a/python-eventlet.spec
+++ b/python-eventlet.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-eventlet
-Version:        0.40.2
+Version:        0.40.3
 Release:        1
 Summary:        Highly concurrent networking library
 License:        MIT
@@ -62,6 +62,10 @@ if [ -d examples ]; then cp -arf examples %{buildroot}/%{_pkgdocdir}; fi
 %{_docdir}/*
 
 %changelog
+* Mon Sep 01 2025 jinshuaiyu <jinshuaiyu@kylinos.cn> - 0.40.3-1
+- Update package to version 0.40.3
+- [SECURITY] Fix request smuggling vulnerability by discarding trailers
+
 * Tue Aug 05 2025 zengliwen <zengliwen@kylinos.cn> - 0.40.2-1
 - Update to 0.40.2
 - Fix compatibility issues identified with Python 3.14 on Linux