Critical Denial of Service Vulnerability in Python httplib2 Library

A vulnerability in the Python httplib2 library allows for denial of service attacks through unbounded decompression of HTTP response bodies when gzip or deflate Content-Encoding is used. This flaw could be exploited by remote attackers sending specially crafted network traffic, potentially leading to excessive resource consumption and service crashes. The issue affects multiple Ubuntu LTS versions, including 26.04, 24.04, and 22.04. Users are advised to update to the latest package versions to mitigate the risk. The vulnerability has been assigned the identifier USN-8537-1. A standard system update will implement the necessary changes to address this issue. The vulnerability poses a significant risk to systems relying on the httplib2 library for HTTP communications.

Key Points: • Vulnerability allows denial of service via unbounded decompression in httplib2. • Affected systems include Ubuntu 26.04, 24.04, and 22.04 LTS versions. • Users should update their httplib2 packages to mitigate the risk.