Ubuntu alert USN-8537-1 (python-httplib2)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8537-1] httplib2 vulnerability
Date:
             
 
Tue, 14 Jul 2026 13:08:21 +0000
Message-ID:
             
 
<E1wjcs1-0001Sp-89@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8537-1
July 14, 2026

python-httplib2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

httplib2 could be made to crash if it received specially crafted network
traffic.

Software Description:
- python-httplib2: comprehensive HTTP client library written for Python3

Details:

It was discovered that httplib2 performed unbounded decompression of HTTP
response bodies when the server used gzip or deflate Content-Encoding. A
remote attacker could possibly use this issue to cause httplib2 to use
excessive resources, leading to a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  python3-httplib2                0.22.0-1ubuntu0.1

Ubuntu 24.04 LTS
  python3-httplib2                0.20.4-3ubuntu0.1

Ubuntu 22.04 LTS
  python3-httplib2                0.20.2-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8537-1
  CVE-2026-59939

Package Information:
  https://launchpad.net/ubuntu/+source/python-httplib2/0.22...
  https://launchpad.net/ubuntu/+source/python-httplib2/0.20...
  https://launchpad.net/ubuntu/+source/python-httplib2/0.20...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=A5GC
-----END PGP SIGNATURE-----