shield Security update for libplist

SUSE-SLE-SERVER-12-SP2-2017-1342

This update for libplist fixes the following issues: Security issues fixed: - CVE-2017-6439: Heap-based buffer overflow in the parse_string_node function. (bsc#1029638) - CVE-2017-6438: Heap-based buffer overflow in the parse_unicode_node function. (bsc#1029706) - CVE-2017-6437: The base64encode function in base64.c allows local users to cause denial of service (out-of-bounds read) via a crafted plist file. (bsc#1029707) - CVE-2017-6436: Integer overflow in parse_string_node. (bsc#1029751) - CVE-2017-6435: Crafted plist file could lead to Heap-buffer overflow. (bsc#1029639)

• Release Date
  Aug 17 2017
• References
  Bugzilla: 1029638, 1029639, 1029706, 1029707, 1029751
  CVEs: CVE-2017-6435, CVE-2017-6436, CVE-2017-6437, CVE-2017-6438, CVE-2017-6439
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libplist
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock src

  libplist3
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libplist
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock src

  libplist3
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libplist
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock src

  libplist3
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libplist
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock src

  libplist3
  Library for handling Apple Binary and XML Property Lists

  1.12-20.3.2 lock rpm