Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 26: Urgent Security Update for libplist with Key Fixes

fedora
Calendar Grey May 2, 2017
Scroller Fedora
The recent Fedora 26 library revision tackles several security vulnerabilities linked to libplist. This patch resolves numerous CVE references.
- Update to upstream 2.0.0 - Fixes the following CVEs plus others - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436 CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 ...

Summary

libplist is a library for manipulating Apple Binary and XML Property Lists

- Update to upstream 2.0.0 - Fixes the following CVEs plus others -CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436

CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545

CVE-2017-5209

su -c 'dnf upgrade libplist' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Topics%20covered

Topics Covered

security advisory critical software update Fedora CVE fix library update libplist

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 2.0.0
Release: 1.fc26
URL: https://libimobiledevice.org/
Summary: Library for manipulating Apple Binary and XML Property Lists

Topics%20covered

Topics Covered

security advisory critical software update Fedora CVE fix library update libplist

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.