[SECURITY] [DLA 870-1] libplist security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : libplist
Version : 1.8-1+deb7u3
CVE ID : CVE-2017-6435 CVE-2017-6436 CVE-2017-6439
More vulnerabilities were discovered in libplist, a library for
reading and writing the Apple binary and XML property lists format.
A maliciously crafted plist file could cause a denial-of-service
(application crash) by triggering a heap-based buffer overflow or
memory allocation error in the parse_string_node function.
For Debian 7 "Wheezy", these problems have been fixed in version
1.8-1+deb7u3.
We recommend that you upgrade your libplist packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=rIDA
-----END PGP SIGNATURE-----
Reply to: