-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : libplist Version : 1.8-1+deb7u3 CVE ID : CVE-2017-6435 CVE-2017-6436 CVE-2017-6439
More vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause a denial-of-service (application crash) by triggering a heap-based buffer overflow or memory allocation error in the parse_string_node function. For Debian 7 "Wheezy", these problems have been fixed in version 1.8-1+deb7u3. We recommend that you upgrade your libplist packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAljVma5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQACgkQ2a0UuVE7 UeT4KhAAl/JpYyIF2e3myiDMHxctOc9PgO180U/x5irP1U6HbRtQkT+cEH0eOFMl HTuLYKo3cAMlCcU2ivNLa5dEzN/ABjfeEWzerBdGEqqH9G432BkuXZWtcIN+grKZ dT6lDaHJqNCk6QJ8JsCwQALBtmPi5ONmjFJEHWewq18/hV/OxGfeiysmka7UTlOl 1Uc9C0UXPPWp1a5+1QZ4YolTT8wvE9UZ63DKBHp2TFwTOxa4l77Re1Wt8JF0o35l q4aRc3pKryGbTXfqcTv/VspcN6CLomD7gX0bXit2h4S6dN6rna5VzUiPrFpeUF4J RwA3HQdA6xwpKsGfPikyob723eKNJISwQpsX+s+k1x8zXf8MXIeJZvB0HQJRSoig 8VIKOETLOM/5cZJVns482XiQQyNHU445GAB8GL9uVZEJtuAk+NHwITdxe11uBZN2 TO0fXSKoFzcLCeVlT1CFn9sQEkNs5cnirBL1uvZWMR7GmCYoN8nFCDoEIpqW0YTP u1J+qJVEG8DSmsFfRRLWjM+fJidrPw783Ro4AYtfqoVjlmS6pq3mpNKYZ2A3wuL9 EDLRWp00BB0lG5rrT5isaw5FJwBHyYqxDfJf+f7MIH9o97f4qAaRPlJA6UYrcpkc K0m6euxf8BCEOguCZlT7WMuWAPWWrnnPLk8MxFdP2bVQbecx2A8= =rIDA -----END PGP SIGNATURE-----
