1. Ubuntu Security Notices
  2. USN-1547-1

USN-1547-1: libGData, evolution-data-server vulnerability

Publication date

28 August 2012

Overview

Applications using GData services could be made to expose sensitive information over the network.

Releases

Packages

Details

Vreixo Formoso discovered that the libGData library, as used
by Evolution and other applications, did not properly verify SSL
certificates. A remote attacker could exploit this to perform a man
in the middle attack to view sensitive information or alter data
transmitted via the GData protocol.

Vreixo Formoso discovered that the libGData library, as used
by Evolution and other applications, did not properly verify SSL
certificates. A remote attacker could exploit this to perform a man
in the middle attack to view sensitive information or alter data
transmitted via the GData protocol.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
11.10 oneiric libgdata13 –  0.9.1-0ubuntu2.1
11.04 natty libgdata11 –  0.8.0-0ubuntu1.1
10.04 lucid libgdata1.2-1 –  2.28.3.1-0ubuntu6.1
libgdata-google1.2-1 –  2.28.3.1-0ubuntu6.1
libgdata6 –  0.5.2-0ubuntu1.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›