[Pkg-gtkpod-devel] Bug#856226: libplist: Intent to NMU 1.12+git+1+e37ca00-0.1

Hilko Bengen bengen at debian.org
Sun Feb 26 18:51:03 UTC 2017


Source: libplist
Severity: normal

Dear Maintainer,

I have NMU'd 1.12+git+1+e37ca00-0.1 (based upon upstream commit
e37ca0090343e0dae97e967d467bab56d502c37a) to DELAYED/15.

This fixes several security issues:

- CVE-2017-5834, CVE-2017-5835, CVE-2017-5836 (Closes: #854000)
- CVE-2017-5209 (Closes: #851196)
- CVE-2017-5545 (Closes: #852385)

Two symbols are added to libplist3 (but none removed), so this should
not cause any ABI incompatibilities.

Please feel free to reschedule or cancel as you see fit.

Cheers,
-Hilko



More information about the Pkg-gtkpod-devel mailing list