-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jan 2026 22:48:42 +0100 Source: python-urllib3 Architecture: source Version: 1.26.5-1~exp1+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1125062 Changes: python-urllib3 (1.26.5-1~exp1+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-21441: Decompression-bomb safeguards bypass when following HTTP redirects. (Closes: #1125062) Checksums-Sha1: a741e68c7328f2c963ef3c4edf3d6e365308acf9 2250 python-urllib3_1.26.5-1~exp1+deb11u3.dsc 31d7e239a9dbaf0a9602d3f272d911d05f98d8a0 292865 python-urllib3_1.26.5.orig.tar.gz 0c97f45a9fd0e737b874ef76827acf27a44274c4 19640 python-urllib3_1.26.5-1~exp1+deb11u3.debian.tar.xz f159493ea4b382a6a1f42f4effff3b8b4df18d5c 7220 python-urllib3_1.26.5-1~exp1+deb11u3_source.buildinfo Checksums-Sha256: a32caaaf908357c14824215257acad4a568d9ab967f7e984b31351270944b374 2250 python-urllib3_1.26.5-1~exp1+deb11u3.dsc a7acd0977125325f516bda9735fa7142b909a8d01e8b2e4c8108d0984e6e0098 292865 python-urllib3_1.26.5.orig.tar.gz 4e671a509949e7de87cdadacd3e336fed6e0f1d7b0bfc8d3003304632200db85 19640 python-urllib3_1.26.5-1~exp1+deb11u3.debian.tar.xz 84afbef5cfd33a245c4906da8aa3061cb280e36c78107eaec7918b0f33b00093 7220 python-urllib3_1.26.5-1~exp1+deb11u3_source.buildinfo Files: bfa5c6a7c51df2022801c04ed0a4776e 2250 python optional python-urllib3_1.26.5-1~exp1+deb11u3.dsc 33b8670413e684188b1340204bc8ad75 292865 python optional python-urllib3_1.26.5.orig.tar.gz 78477b43acda0a833bde5d7bff778aa7 19640 python optional python-urllib3_1.26.5-1~exp1+deb11u3.debian.tar.xz fc469de286337bf5e19911d2a3d933b5 7220 python optional python-urllib3_1.26.5-1~exp1+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmlzFIwACgkQ05pJnDwh pVIifw//c4TIVupkU9mH3HgucVqKZj9FIPASYY1YPskzz8hQuKkubetLdHXUPKw2 3t9O6KAk83vqW2EVT3VhfXZK4InXQh3u4vJycAvND+mO80jML9HBgLu8gHcRqbZ0 qfUB4mp7+E/nDitIyS5SiErtnFKt0Pa4FI37HqM4jaBDrb/gtVAtHnKTrFYuU22J DzaYjpy4y5v2L0wWEwOCKoiIFngGRncpKhpDBrKE48+Me/dd2MLZgFq/nYFZf2rI BZxdC+pB3BGZjTbaAbm1kEur/bZcI12GdqH1NHnGn49VnZEUDlcB/64x6YuDH9xv zJ2KGqHgLeyPPJMoNWTsWTIBrrEa//A0I2uz6zZmpNOLYQ2zGoYKs0UTQQF3AqZX axwmcMhwLlbyx4Z1T5IZVGpsjX97P/H2UrrV/7oD0OvYYcdcMk6wtb8Ou/TfOv2o x7+Lb85WhR5G0+jBPY+g+ZMCT7ENWN5ZIroWH2XKxR6w2+Yly3nk82IbGNgpbmWe m6QsDEMhuRaNpqJYxtoJimEieOJk/PIgMU5psNMN4/0sTJeLOtQ3UkT0WbWnfvcU 3DMGhnScuSiVKKV9/0+rikWBK544qcAlO1C++od35ViplUjAOcLxVYqmUC/IAWtu 0y5jc761lgFhyVWubg8UXc/6ZoQQUL9iOH8G3l+uMKej+APR21A= =cZb2 -----END PGP SIGNATURE-----
