USN-3429-1: Libplist vulnerability

Releases

• Ubuntu 17.04
• Ubuntu 16.04 ESM
• Ubuntu 14.04 ESM

Packages

• libplist - Library for handling Apple binary and XML property lists

Details

Wang Junjie discovered that Libplist incorrectly handled certain files.
If a user were tricked into opening a crafted file, an attacker could possibly
use this to cause a crash or denial or service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 17.04

• libplist-utils - 1.12-3.1ubuntu0.17.04.1
• libplist3 - 1.12-3.1ubuntu0.17.04.1
• python-plist - 1.12-3.1ubuntu0.17.04.1

Ubuntu 16.04

• libplist-utils - 1.12-3.1ubuntu0.16.04.1
• libplist3 - 1.12-3.1ubuntu0.16.04.1
• python-plist - 1.12-3.1ubuntu0.16.04.1

Ubuntu 14.04

• libplist-utils - 1.10-1ubuntu0.1
• libplist1 - 1.10-1ubuntu0.1
• python-plist - 1.10-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2017-7982