Accepted python-httplib2 0.20.4-3+deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 13:29:58 -0300
Source: python-httplib2
Architecture: source
Version: 0.20.4-3+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Changes:
 python-httplib2 (0.20.4-3+deb12u1) bookworm-security; urgency=medium
 .
   * CVE-2026-59939: The httplib2 HTTP client library performs unbounded
     decompression of HTTP response bodies encoded with Content-Encoding:
     gzip or deflate. This is a classic decompression bomb (zip bomb)
     attack against the HTTP client.
Checksums-Sha1:
 261931cdf75549aef01b6e71bcb54c967071d3c5 2377 python-httplib2_0.20.4-3+deb12u1.dsc
 672cbabd671df723efa38ce65894cb940cd406b1 215180 python-httplib2_0.20.4.orig.tar.xz
 4994616f88c4107a097d093f8339c7a8e353e232 15252 python-httplib2_0.20.4-3+deb12u1.debian.tar.xz
 208a145441835e203eb3fd8bacbe4edc661f2562 8911 python-httplib2_0.20.4-3+deb12u1_source.buildinfo
Checksums-Sha256:
 49fa5d4bf1549b06d5251c4bc6a23cadc995e0a5ca962b6af9d5bd394b8b9f4b 2377 python-httplib2_0.20.4-3+deb12u1.dsc
 d3722ac1474ab342bc48b70abe7e5d21d5524a3b262bd37fe2baf21793579444 215180 python-httplib2_0.20.4.orig.tar.xz
 64df5f3520395304f80b67704e53f254f14414a010bc49db97983061e26bc37b 15252 python-httplib2_0.20.4-3+deb12u1.debian.tar.xz
 e1f6356019545768b3eda6f93b61f7b8d724b800bfb0e9ceb03eeb4550a0af60 8911 python-httplib2_0.20.4-3+deb12u1_source.buildinfo
Files:
 68d6d17f9fa04c9227d08eb0ad2ce450 2377 python optional python-httplib2_0.20.4-3+deb12u1.dsc
 b9180c160e5224fb1f2bc6d12c3a1d9d 215180 python optional python-httplib2_0.20.4.orig.tar.xz
 66f1200cd546694ed146cdc4a7c562ea 15252 python optional python-httplib2_0.20.4-3+deb12u1.debian.tar.xz
 af441a9e14c279fbfbe8271f375ece93 8911 python optional python-httplib2_0.20.4-3+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=K4Qs
-----END PGP SIGNATURE-----