-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Sep 2026 14:30:46 +0100
Source: python-urllib3
Architecture: source
Version: 2.8.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Changes:
python-urllib3 (2.8.0-1) unstable; urgency=medium
.
* Team upload.
* New upstream release:
- GHSA-8988-9cw3-xx77: The TLS configuration for HTTPS proxies could be
ignored or overridden.
- GHSA-vxq7-64xx-v4gw: HTTPResponse.stream() and read_chunked() could
buffer a chunk-size line of unbounded length in memory.
- GHSA-gh4c-6fx4-qh6g: Chunked Deflate streaming could enter an infinite
loop.
* Drop python3-backports.zstd build/test-dependencies.
* Skip tests that fail due to recent changes in Python.
Checksums-Sha1:
2ee30682c44dbb1f108a8e24d7af11738c56e851 3045 python-urllib3_2.8.0-1.dsc
e6656fecc0bb57837029f41802d59513002832b0 458972 python-urllib3_2.8.0.orig.tar.gz
bcb6256353a30a3512c7864745070db92da28e06 39004 python-urllib3_2.8.0-1.debian.tar.xz
f029677645443d822b861397f176213688722c0f 1021228 python-urllib3_2.8.0-1.git.tar.xz
ccba85e45622b8b842a9fecda3de5f100df31a5d 17750 python-urllib3_2.8.0-1_source.buildinfo
Checksums-Sha256:
3a9e3bfbe31072ea9e9f1e18fd403cdc130ab68dd33d8ee8ed5b9bad6c50049b 3045 python-urllib3_2.8.0-1.dsc
63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63 458972 python-urllib3_2.8.0.orig.tar.gz
6a6cdc61c7bff699fb531d460bac74f8e0bad1b63f0ced29b482d63208ccb1fe 39004 python-urllib3_2.8.0-1.debian.tar.xz
8cbfcc44ee3ce322599cc2390804e3465a5fd583764efbcc276e9fb22f5c4911 1021228 python-urllib3_2.8.0-1.git.tar.xz
f88f86d800f6bd9d2cc003e88f10577d7fb43d3e64c5583623406208cc82aea0 17750 python-urllib3_2.8.0-1_source.buildinfo
Files:
1d6623a22813a4ab043e59969cba4d0c 3045 python optional python-urllib3_2.8.0-1.dsc
e8ed250b4d520f9e3c0df3165953aa94 458972 python optional python-urllib3_2.8.0.orig.tar.gz
c3f80939680628b350b0eb3fce989b36 39004 python optional python-urllib3_2.8.0-1.debian.tar.xz
53d5b20c56dd540a6bbe6cfbdc5023c7 1021228 python None python-urllib3_2.8.0-1.git.tar.xz
033d3ed89ce0a39af5e128c3b2087ec6 17750 python optional python-urllib3_2.8.0-1_source.buildinfo
Git-Tag-Info: tag=5e71e15340add1b2a57ca4f0141d70ffeb7a21a8 fp=ac0a4ff12611b6fccf01c111393587d97d86500b
Git-Tag-Tagger: Colin Watson <cjwatson@debian.org>
-----BEGIN PGP SIGNATURE-----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=WySn
-----END PGP SIGNATURE-----