-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jun 2026 07:01:27 +0200
Source: python-urllib3
Binary: python3-urllib3
Architecture: all
Version: 1.26.12-1+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 python3-urllib3 - HTTP library with thread-safe connection pooling for Python3
Closes: 1136653
Changes:
 python-urllib3 (1.26.12-1+deb12u4) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2026-44431: Sensitive headers forwarded across origins in proxied
     low-level redirects. (Closes: #1136653)
Checksums-Sha1:
 6d9191718138349ccf1673518acc57cd8c2ef206 7201 python-urllib3_1.26.12-1+deb12u4_all-buildd.buildinfo
 f4a992a710581ef9d36524781ef572e443dcf913 114476 python3-urllib3_1.26.12-1+deb12u4_all.deb
Checksums-Sha256:
 4a0119b02dbd2917e4fcbf2020e2bec7381767f4e9c992f84cdf39274631577d 7201 python-urllib3_1.26.12-1+deb12u4_all-buildd.buildinfo
 9dd6fef10317e437f2195cb5ea8b38d8e39e02106c5fda7b16d58b4bb9a85886 114476 python3-urllib3_1.26.12-1+deb12u4_all.deb
Files:
 81f78bed152e16ba4565cd9dc3d54d27 7201 python optional python-urllib3_1.26.12-1+deb12u4_all-buildd.buildinfo
 e54d35425814655d051dbd383f40a98d 114476 python optional python3-urllib3_1.26.12-1+deb12u4_all.deb

-----BEGIN PGP SIGNATURE-----
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=12lG
-----END PGP SIGNATURE-----