{"id":"MGASA-2020-0269","summary":"Updated python-httplib2 packages fix security vulnerability","details":"Updated python-httplib2 packages fix security vulnerability:\n\nIn httplib2, an attacker controlling unescaped part of uri for\nhttplib2.Http.request() could change request headers and body, send\nadditional hidden requests to same server. This vulnerability impacts\nsoftware that uses httplib2 with uri constructed by string concatenation,\nas opposed to proper urllib building with escaping (CVE-2020-11078).\n","modified":"2026-04-16T04:44:22.434978891Z","published":"2020-07-04T22:47:21Z","upstream":["CVE-2020-11078"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2020-0269.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=26750"},{"type":"WEB","url":"https://www.debian.org/lts/security/2020/dla-2232"}],"affected":[{"package":{"name":"python-httplib2","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/python-httplib2?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.0-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2020-0269.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}