-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 20 Jan 2026 22:34:53 +0100
Source: python-urllib3
Architecture: source
Version: 1.26.12-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1126002
Changes:
 python-urllib3 (1.26.12-1+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent issue in HTTPResponse().read() when decoded_content is True and then
     False Provided it has initialized eligible decoder(decompressor) and did
     decode once (Closes: #1126002)
   * fix missed coverage when calling read() having amt=None
   * tests: Change expectations as the initial payload changed
Checksums-Sha1:
 d0da29c2f0ad644e4e8279beda93c335d9d60a0b 2499 python-urllib3_1.26.12-1+deb12u3.dsc
 ad6bd811a3f4c3e04d86c2706c9994c3e2236e53 299806 python-urllib3_1.26.12.orig.tar.gz
 a413a9461bebcb57313d5339781cfb81a9443524 20140 python-urllib3_1.26.12-1+deb12u3.debian.tar.xz
 84cb5f9cb4a137bdb5660f08f172762ccc3d98b3 7306 python-urllib3_1.26.12-1+deb12u3_source.buildinfo
Checksums-Sha256:
 90903b9264067790fa58239bc10cc84d0cdc9e889a51d39663bf104f6de530f0 2499 python-urllib3_1.26.12-1+deb12u3.dsc
 3fa96cf423e6987997fc326ae8df396db2a8b7c667747d47ddd8ecba91f4a74e 299806 python-urllib3_1.26.12.orig.tar.gz
 d0673891401721305fec795b7df8c0fc1ea1bb5f349766a61f4f7e2a454df09f 20140 python-urllib3_1.26.12-1+deb12u3.debian.tar.xz
 64d890a7f6605fb9b4228a0269e6bf6d56fbb28b4c2b3ec6d864d162d93acfb1 7306 python-urllib3_1.26.12-1+deb12u3_source.buildinfo
Files:
 0bb5ca622dbd8d9a5c74fe484c926a35 2499 python optional python-urllib3_1.26.12-1+deb12u3.dsc
 ba308b52b9092184cf4905bc59a88fc0 299806 python optional python-urllib3_1.26.12.orig.tar.gz
 db1331c7728638a4f96e13fcb48236a2 20140 python optional python-urllib3_1.26.12-1+deb12u3.debian.tar.xz
 ca74243356d6d58972575b73aba13d2f 7306 python optional python-urllib3_1.26.12-1+deb12u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=G2EZ
-----END PGP SIGNATURE-----