Accepted python-httplib2 0.22.0-1+deb13u1 (source) into proposed-updates

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Jul 2026 17:00:32 -0300
Source: python-httplib2
Architecture: source
Version: 0.22.0-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Emmanuel Arias <[email protected]>
Changes:
 python-httplib2 (0.22.0-1+deb13u1) trixie-security; urgency=medium
 .
   * CVE-2026-59939: The httplib2 HTTP client library performs unbounded
     decompression of HTTP response bodies encoded with Content-Encoding:
     gzip or deflate. This is a classic decompression bomb (zip bomb)
     attack against the HTTP client.
Checksums-Sha1:
 e143ea82c0b1f8253ef18303a1936216f8cabaf3 2377 python-httplib2_0.22.0-1+deb13u1.dsc
 6a5cda64d2486d008d528001328b8a0d38f0ef76 351116 python-httplib2_0.22.0.orig.tar.gz
 ad550d3e1b8c2d7e0f2a7427e9b3055dca66514e 14576 python-httplib2_0.22.0-1+deb13u1.debian.tar.xz
 b05065724b395f9bab9a009dcb061730ff4d8a28 7926 python-httplib2_0.22.0-1+deb13u1_source.buildinfo
Checksums-Sha256:
 cce4b0b39be63563c73af08b7405cba5f28b46c8accc93ff1c123ace65373f14 2377 python-httplib2_0.22.0-1+deb13u1.dsc
 d7a10bc5ef5ab08322488bde8c726eeee5c8618723fdb399597ec58f3d82df81 351116 python-httplib2_0.22.0.orig.tar.gz
 fb1bb26b3f443e3ac390455cbb3ae55af7799462c774067c1b8bfbb38918467d 14576 python-httplib2_0.22.0-1+deb13u1.debian.tar.xz
 36059cbe5750f10d6bfb0da9a7c8d21bd71e980bc0e335b8bcf96bcf50f3ddbe 7926 python-httplib2_0.22.0-1+deb13u1_source.buildinfo
Files:
 c70b777a754ba11ee6f90201e34a749e 2377 python optional python-httplib2_0.22.0-1+deb13u1.dsc
 7ca0a2bfd95ba4ab4b6e28804cdb94ed 351116 python optional python-httplib2_0.22.0.orig.tar.gz
 3e1f7c100f4ac6cb29806ee54c4819e2 14576 python optional python-httplib2_0.22.0-1+deb13u1.debian.tar.xz
 7dc93d2fae3c441e2ebe63007fefcdc1 7926 python optional python-httplib2_0.22.0-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=4zIG
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaoTTLwAKCRCb9qggYcy5
IZIBAQCNaVsVmnTD9mMENmmfH0rxejNj0nFzOxZ1Dy/ZMBtFDgEAlUbIubu1AiGc
fX9lgfd7TUzILH3wCO0C1e0IvBuN4Qc=
=n13T
-----END PGP SIGNATURE-----