Stay Secure with the Latest Linux Advisories

security advisoryUbuntumoderate advisory

Ubuntu 11.10 USN-1375-1 Moderate: httplib2 Sensitivity Threat

httplib2 could be made to expose sensitive information over the network.. =========================================================================Ubuntu Security Notice USN-1375-1 February 27, 2012 python-httplib2 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS Summary: httplib2 could be made to expose sensitive information over the network. Software Description: - python-httplib2: comprehensive HTTP client library written for Python Details: The httplib2 Python library earlier than version 0.7.0 did not perform any server certificate validation when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information in applications that used the httplib2 library. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: python-httplib2 0.7.2-1ubuntu2~0.11.10.1 python3-httplib2 0.7.2-1ubuntu2~0.11.10.1 Ubuntu 11.04: python-httplib2 0.7.2-1ubuntu2~0.11.04.1 python3-httplib2 0.7.2-1ubuntu2~0.11.04.1 Ubuntu 10.10: python-httplib2 0.7.2-1ubuntu2~0.10.10.1 python3-httplib2 0.7.2-1ubuntu2~0.10.10.1 Ubuntu 10.04 LTS: python-httplib2 0.7.2-1ubuntu2~0.10.04.1 In general, a standard system update will make all the necessary changes. This update uses a new upstream release, which includes additional bug fixes. References: https://ubuntu.com/security/notices/USN-1375-1 https://bugs.launchpad.net/ubuntu/+source/python-httplib2/+bug/882030 Package Information: https://launchpad.net/ubuntu/+source/python-httplib2/0.7.2-1ubuntu2~0.11.10.1 https://launchpad.net/ubuntu/+source/python-httplib2/0.7.2-1ubuntu2~0.11.04.1 https://launchpad.net/ubuntu/+source/python-httplib2/0.7.2-1ubuntu2~0.10.10.1 https://launchpad.net/ubuntu/+source/python-httplib2/0.7.2-1ubuntu2~0.10.04.1 . Ubuntu Security Notice USN-1375-1 highlights a vulnerability in httplib2 that may lead to sensitive information exposure. Users should update promptly. python-httplib2,data security,network threats. . LinuxSecurity.com Team

Feb 27, 2012 Ubuntu