← Back to branch summary

~ubuntu-branches/ubuntu/natty/ubuntu-sso-client/natty-security

Viewing all changes in revision 31.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-01-31 14:01:31 UTC
  • mfrom: (30.1.1 natty-proposed)
  • Revision ID: package-import@ubuntu.com-20120131140131-ct6aefba2k08w084
Tags: 1.2.1-0ubuntu2.1
https://launchpad.net/bugs/882055
* SECURITY UPDATE: MITM via incorrect ssl cert validation (LP: #882055)
  - debian/patches/CVE-2011-4408.patch: use pycurl instead of urllib2 in
    ubuntu_sso/account.py,
    ubuntu_sso/credentials.py,
    ubuntu_sso/tests/test_credentials.py,
    ubuntu_sso/utils/curllib.py,
    ubuntu_sso/utils/tests/test_curllib.py.
  - debian/control: add python-pycurl dependency.
  - CVE-2011-4408

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: