-------------------------------------------------------------------------
Debian LTS Advisory DLA-4748-1                [email protected]
https://www.debian.org/lts/security/                       Emmanuel Arias
August 20, 2026                               https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : python-httplib2
Version        : 0.20.4-3+deb12u1
CVE ID         : CVE-2026-59939

A flaw was discovered in python-httplib2, a comprehensive Python HTTP
client library. Unbounded decompression of HTTP response bodies encoded
with gzip or deflate Content-Encoding could result in denial of service.

For Debian 12 bookworm, this problem has been fixed in version
0.20.4-3+deb12u1.

We recommend that you upgrade your python-httplib2 packages.

For the detailed security status of python-httplib2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/python-httplib2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: PGP signature

Reply via email to