Source: python-urllib3
Version: 1.26.12-1+deb12u2
Severity: important
X-Debbugs-Cc: [email protected], [email protected]
Control: affects -1 + release.debian.org,security.debian.org
Control: tags -1 + bookworm
This is to document a regression caused by a broken backport of
CVE-2026-21441 fix vin bookworm:
$ python3 -c 'import urllib3; resp=urllib3.HTTPResponse(); resp.drain_conn()'
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/usr/lib/python3/dist-packages/urllib3/response.py", line 307, in
drain_conn
decode_content=self._has_decoded_content,
^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: 'HTTPResponse' object has no attribute '_has_decoded_content'.
Did you mean: 'decode_content'?
There is an upcoming regression fix.
Regards,
Salvatore
