[DSA 6441-1] python-httplib2 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6441-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
August 14, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : python-httplib2
CVE ID         : CVE-2026-59939

A flaw was discovered in python-httplib2, a comprehensive Python HTTP
client library. Unbounded decompression of HTTP response bodies encoded
with gzip or deflate Content-Encoding could result in denial of service.

For the stable distribution (trixie), this problem has been fixed in
version 0.22.0-1+deb13u1.

We recommend that you upgrade your python-httplib2 packages.

For the detailed security status of python-httplib2 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/python-httplib2

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmp++iVfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0RcuQ//YMSYM4hRZs92QhpcBNlO2cgSstZ453qX0U3AmJlQxp0YnTKHIbSWB97d
hrRnNteWwwLG1QG8T271xzNQbunr+zfYmUytEsWwbN/srXcmdBYaVsmPSmZS4Cc7
dH0hG24AbbiIlJ2tkns/OxJFjq0T9KF5AGjFEtGCoMwMli+j0Apz4cbs7pKH1khf
51BXxtvTUxew8BPhW1fJfzUxFH4z7ChmvhSQ3q/PsSBO+QmIXw2fxVZpzmqXQoI0
YQJrH3N8oSMLLpX7osWoZ2zhs2XDxbwAKM2rqs525f/85QZlrB/psZXMgtNnegTv
fp7TxUpEAElKmbhjbGVvRn96053cCe2GWvEVZUA8XUR+09rqxR6Wlu6EI3RJt9Wr
YLfYG8kMsUqLJfKj65Iv9W5ClzzCYp20wqI00UgemVxLg8rTeN+n7yg0sStulCa6
sfguwDhmH5khbBZuGGvUThXRru6+hXcXUUuEC4C3IT7C7YG725pAyBeZPH8G6jEs
VpeU/23Qt4pSas11fNQCO2ntGv5XklreA0XcVoAKdQ5Pln0MKmS9RHi0sVaLH9ic
HJoXvhs2fx7ksvcEm3oktk28NRCncgcfw9V9FBbqHU6bnDchDjmLhewSzTeQh5T9
z+/RFFFjo/rfXBhBb9jZjKQS3f+Y9k6XKGCesRpqK5KxeBGGZfI=
=cdB7
-----END PGP SIGNATURE-----