-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Jul 2026 17:00:32 -0300
Source: python-httplib2
Binary: python3-httplib2
Architecture: all
Version: 0.22.0-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Description:
 python3-httplib2 - comprehensive HTTP client library written for Python3
Changes:
 python-httplib2 (0.22.0-1+deb13u1) trixie-security; urgency=medium
 .
   * CVE-2026-59939: The httplib2 HTTP client library performs unbounded
     decompression of HTTP response bodies encoded with Content-Encoding:
     gzip or deflate. This is a classic decompression bomb (zip bomb)
     attack against the HTTP client.
Checksums-Sha1:
 1b963bfc1d20e9edd55aa5be4f36a407d0ccd847 7167 python-httplib2_0.22.0-1+deb13u1_all-buildd.buildinfo
 9b7eb2ea68a688065f2dfa297550573d570c6797 39164 python3-httplib2_0.22.0-1+deb13u1_all.deb
Checksums-Sha256:
 77044a41fb4df745251c5077eec41d43b97300d35e2ec7538f619cdb5dde977b 7167 python-httplib2_0.22.0-1+deb13u1_all-buildd.buildinfo
 47367d0117220161f94c33c3a9ba5d31b1a8a6560ab4c6606c825b5d9c5d802e 39164 python3-httplib2_0.22.0-1+deb13u1_all.deb
Files:
 a23eafc75446f61d5a94743fce1e70ec 7167 python optional python-httplib2_0.22.0-1+deb13u1_all-buildd.buildinfo
 b9a0c0241785289c26f9a3ba299cc56f 39164 python optional python3-httplib2_0.22.0-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=4n2h
-----END PGP SIGNATURE-----