-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 20 Jan 2026 22:34:53 +0100
Source: python-urllib3
Binary: python3-urllib3
Architecture: all
Version: 1.26.12-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 python3-urllib3 - HTTP library with thread-safe connection pooling for Python3
Closes: 1126002
Changes:
 python-urllib3 (1.26.12-1+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent issue in HTTPResponse().read() when decoded_content is True and then
     False Provided it has initialized eligible decoder(decompressor) and did
     decode once (Closes: #1126002)
   * fix missed coverage when calling read() having amt=None
   * tests: Change expectations as the initial payload changed
Checksums-Sha1:
 2bc05df156be4d9edfe06bf3225554d720283d57 7177 python-urllib3_1.26.12-1+deb12u3_all-buildd.buildinfo
 25247761f6508faeff33a0d3074dc00f1bafcc32 114300 python3-urllib3_1.26.12-1+deb12u3_all.deb
Checksums-Sha256:
 9d33da94af444ee9dafc6601d98191a0b3c0785a22ba4fa755af0f1fdb99f2ab 7177 python-urllib3_1.26.12-1+deb12u3_all-buildd.buildinfo
 78c45a1c9912125f239269f80e2a5b8fc38c4a76169d1e4a2f0090369d2fd7a5 114300 python3-urllib3_1.26.12-1+deb12u3_all.deb
Files:
 a3027becd94f562c7d6efc0b80e69ef3 7177 python optional python-urllib3_1.26.12-1+deb12u3_all-buildd.buildinfo
 110069ae73fbf61ec5381040ea632d71 114300 python optional python3-urllib3_1.26.12-1+deb12u3_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmlwxrgACgkQiZlfn74W
V6lqwhAAlNrFgtu7U0OJWkWfPseAVf8r54BJGBIkBytAqFPwEvZbF8yrgisVjw8J
Ir2fsLvHnAwQjAMfEYEkPQEylcvDAL1qVtE7hqgsxPrH6XmzS8UKwm0KdxoFCHhI
IaGNn1oGoz7jFYmTuZCrvl44RPx+baumkJDZRHdDURmfq/k1V2jJoMYFFt/zh0VY
uuMFHmIPaRS25URQQRsbw2CB6sIjXqWFFXCFRps52r7FIKb0K+p57AG666iQKneE
NiDIz6v4mS5uZU0iRx5hO55H+1Hy7lSgGlqdiPYgROERS/Donp7z0TKMI07f8n4E
mkFZnGzt7sNt3CmvWMit6/9kNoOMYP9azkxluGBQKVWUaQ///DAHXK/V+h3+vAE4
gfxK7amvQC8rdh3aH+YamQY8bEfupe+5B+ixq3l2wt7V3zZDD8gmbAKI2UptAgjs
NSu1bR9Vsd0Annq9m7lF9k8IlMriONiN8MYp7p8LrgpMKfCG3NW5lKDRQjT4k2Xm
E64pQ4kYkW0ik2k3gdD5MiH4injJb1+8KXCKv3fVHN3amRRHcBDiHpETxnET2T/G
afy4Iy6KmjWCFElJqeul6E51eT0cCSZUmtxWurCW8+cKaOQdjl5bk1PvipsDOdwJ
xkM43a6MPirPymuthB61meE2Q+AIRJJYDcKngY7Bs+4siIlBKhA=
=3tT5
-----END PGP SIGNATURE-----