shield Security update for libplist

SUSE-SLE-SDK-12-SP2-2017-835

This update for libplist fixes the following security issues: - CVE-2017-5545: The main function in plistutil.c in libimobiledevice libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short. (bsc#1021610). - CVE-2017-5209: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data. (bsc#1019531) - CVE-2017-5836: A type inconsistency in bplist.c was fixed. (bsc#1023807) - CVE-2017-5835: A memory allocation error leading to DoS was fixed. (bsc#1023822) - CVE-2017-5834: A heap-buffer overflow in parse_dict_node was fixed (bsc#1023848) - CVE-2017-7982: Denial of service (heap-based buffer over-read and application crash) via a crafted plist file (bsc#1035312) - CVE-2017-6440: A specially crafted plist file could lead to denial of service (bsc#1029631)

Release Date

May 22 2017
References

Bugzilla: 1021610, 1019531, 1023807, 1023822, 1023848, 1035312, 1029631
CVEs: CVE-2017-5209, CVE-2017-5834, CVE-2017-5835, CVE-2017-6440, CVE-2017-5836, CVE-2017-5545, CVE-2017-7982
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

Packages

libplist
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock src

libplist++1
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

Packages

libplist
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock src

libplist++1
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

Packages

libplist
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock src

libplist++1
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

Packages

libplist
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock src

libplist++1
Library for handling Apple Binary and XML Property Lists

1.8-10.9.1 lock rpm