-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Jul 2026 17:00:32 -0300 Source: python-httplib2 Architecture: source Version: 0.22.0-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian Python Team <[email protected]> Changed-By: Emmanuel Arias <[email protected]> Changes: python-httplib2 (0.22.0-1+deb13u1) trixie-security; urgency=medium . * CVE-2026-59939: The httplib2 HTTP client library performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate. This is a classic decompression bomb (zip bomb) attack against the HTTP client. Checksums-Sha1: e143ea82c0b1f8253ef18303a1936216f8cabaf3 2377 python-httplib2_0.22.0-1+deb13u1.dsc 6a5cda64d2486d008d528001328b8a0d38f0ef76 351116 python-httplib2_0.22.0.orig.tar.gz ad550d3e1b8c2d7e0f2a7427e9b3055dca66514e 14576 python-httplib2_0.22.0-1+deb13u1.debian.tar.xz b05065724b395f9bab9a009dcb061730ff4d8a28 7926 python-httplib2_0.22.0-1+deb13u1_source.buildinfo Checksums-Sha256: cce4b0b39be63563c73af08b7405cba5f28b46c8accc93ff1c123ace65373f14 2377 python-httplib2_0.22.0-1+deb13u1.dsc d7a10bc5ef5ab08322488bde8c726eeee5c8618723fdb399597ec58f3d82df81 351116 python-httplib2_0.22.0.orig.tar.gz fb1bb26b3f443e3ac390455cbb3ae55af7799462c774067c1b8bfbb38918467d 14576 python-httplib2_0.22.0-1+deb13u1.debian.tar.xz 36059cbe5750f10d6bfb0da9a7c8d21bd71e980bc0e335b8bcf96bcf50f3ddbe 7926 python-httplib2_0.22.0-1+deb13u1_source.buildinfo Files: c70b777a754ba11ee6f90201e34a749e 2377 python optional python-httplib2_0.22.0-1+deb13u1.dsc 7ca0a2bfd95ba4ab4b6e28804cdb94ed 351116 python optional python-httplib2_0.22.0.orig.tar.gz 3e1f7c100f4ac6cb29806ee54c4819e2 14576 python optional python-httplib2_0.22.0-1+deb13u1.debian.tar.xz 7dc93d2fae3c441e2ebe63007fefcdc1 7926 python optional python-httplib2_0.22.0-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmp8t1YSHGVhbWFudUBk ZWJpYW4ub3JnAAoJEPqd7F3hHGPx+uUQALPDZWPh/sjUL+1xK+P40PmUiEwnnuGp EcDLxIDG9pf1kQrk/MaNjTCKow54NWc308sXfOtiJmG7aU9+I/Dfzu5bcprHd3c1 gSRSTncAi6N8xsX/MXcmaWzPdf5EC9J7JBN6sboTydVHht9rUaYw4Mq07ZvPWTFP j5tq9nqIPPjxNPDL7Ncr/o+2XhZQJ8Wieyc3+TTuGYewqfvKYfYrS2iKMlRR0hnY Wqz25Or13L/XQM7qnhQwNLEtJSDUstm8b9/augbX09RgU4SYad4dnP+noZYqzUJH gEmBcxiwyplUR/V5q0c4n5EWnXqgcF4IV08acwZ5eayg+MDPxzpcBduuYFpRTkWb elsXAdqxs7P51AnDpmNYsyto/PRzJB4PF2730VnzwwRIiXcS9GejDJyzJ3M9VjZ4 sTwqyhWJhkrfl7ypysYdw/5zC+o0XCzy8X07iUjRiRWGiwp3UUACKQm78jZoOYLS WHP8c9gF5vr19X0bR+n7G/u70RtPdOt6wdCH1gM1jlb2h0xbaQsdEMa9mElLz9xY d6hWSDcvYT67UOV8smmBIj9mCZA5KKgAgtXmHW1Bu+KJKMLmkdunhUqKHfGtDxAt e72nH9zkrkQVXXHeHjFw0hBUs1EuzRQoSx0ICaE+mCkjbSVXLngb7t534u9BWW8T ewCb4LETjEIP =4zIG -----END PGP SIGNATURE-----
pgptL1NJlGIq5.pgp
Description: PGP signature
