Debian Package Tracker

general

source: libplist (main)
version: 2.0.0-5
maintainer: Debian QA Group [DMD]
arch: all any
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.8-1
o-o-sec: 1.8-1+deb7u3
oldstable: 1.11-3
stable: 1.12+git+1+e37ca00-0.3
testing: 2.0.0-5
unstable: 2.0.0-5

versioned links

1.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8-1+deb7u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.11-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.12+git+1+e37ca00-0.3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.0.0-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libplist++-dev
libplist++3v5
libplist-dev
libplist-doc
libplist-utils
libplist3
python-plist

action needed

lintian reports 2 warnings high

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-05-04 Last update: 2018-07-05 07:54

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2018-11-07 Last update: 2018-11-19 21:07

Depends on packages which need a new maintainer normal

The packages that libplist depends on which need a new maintainer are:

doxygen (#888580)
- Build-Depends: doxygen

Created: 2018-10-12 Last update: 2018-11-19 19:01

2 new commits since last upload, time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.0.0-6, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 3abe743b71bca31526c928682de8e9db56a3994f
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Oct 1 09:39:55 2018 +0200

    Remove debian/pycompat, it's not used by any modern Python helper

commit c4c0f8057c9e47613c948f7a205b8401a95f1665
Author: Jelmer Vernooĳ <jelmer@jelmer.uk>
Date:   Fri Sep 28 06:31:53 2018 +0100

    Remove unnecessary X-Python{,3}-Version field in debian/control.
    
    Fixes lintian: ancient-python-version-field
    See https://lintian.debian.org/tags/ancient-python-version-field.html for more details.

Created: 2018-09-28 Last update: 2018-11-19 03:06

O: This package has been orphaned and needs a maintainer. normal

This package has been orphaned. This means that it does not have a real maintainer at the moment. Please consider adopting this package if you are interested in it. Please see bug number #867217 for more information.

Created: 2017-12-02 Last update: 2017-12-02 00:26

12 ignored security issues in jessie low

There are 12 open security issues in jessie.

12 issues skipped by the security teams:

CVE-2017-6440: The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
CVE-2017-6435: The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.
CVE-2017-6436: The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
CVE-2017-5545: The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
CVE-2017-5836: The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
CVE-2017-5209: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
CVE-2017-6437: The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
CVE-2017-5834: The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
CVE-2017-6438: Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.
CVE-2017-5835: libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
CVE-2017-7982: Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
CVE-2017-6439: Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

Please fix them.

Created: 2017-01-13 Last update: 2018-09-24 07:48

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2014-07-02 Last update: 2014-07-02 18:05

news

[rss feed]

[2018-09-24] libplist 2.0.0-5 MIGRATED to testing (Debian testing watch)
[2018-09-18] Accepted libplist 2.0.0-5 (source) into unstable (Boyuan Yang)
[2018-07-09] libplist 2.0.0-4 MIGRATED to testing (Debian testing watch)
[2018-07-03] Accepted libplist 2.0.0-4 (source) into unstable (Boyuan Yang) (signed by: Adam Borowski)
[2018-04-30] libplist 2.0.0-3 MIGRATED to testing (Debian testing watch)
[2018-04-25] Accepted libplist 2.0.0-3 (source amd64 all) into unstable (Steve Langasek)
[2017-07-13] libplist 2.0.0-2 MIGRATED to testing (Debian testing watch)
[2017-07-07] Accepted libplist 2.0.0-2 (source) into unstable (Adrian Bunk)
[2017-05-24] Accepted libplist 2.0.0-1 (source amd64 all) into experimental (Chow Loong Jin)
[2017-05-05] libplist 1.12+git+1+e37ca00-0.3 MIGRATED to testing (Debian testing watch)
[2017-05-02] Accepted libplist 1.12+git+1+e37ca00-0.3 (all source) into unstable (Salvatore Bonaccorso)
[2017-04-04] libplist 1.12+git+1+e37ca00-0.2 MIGRATED to testing (Debian testing watch)
[2017-04-01] Accepted libplist 1.12+git+1+e37ca00-0.2 (all source) into unstable (Salvatore Bonaccorso)
[2017-03-24] Accepted libplist 1.8-1+deb7u3 (source amd64 all) into oldstable (Markus Koschany)
[2017-03-24] libplist 1.12+git+1+e37ca00-0.1 MIGRATED to testing (Debian testing watch)
[2017-03-13] Accepted libplist 1.12+git+1+e37ca00-0.1 (source) into unstable (Hilko Bengen)
[2017-02-28] Accepted libplist 1.8-1+deb7u2 (source amd64 all) into oldstable (Markus Koschany)
[2017-01-31] Accepted libplist 1.8-1+deb7u1 (source amd64 all) into oldstable (Emilio Pozuelo Monfort)
[2015-09-06] libplist 1.12-3.1 MIGRATED to testing (Britney)
[2015-08-26] Accepted libplist 1.12-3.1 (all amd64 source) into unstable, unstable (Simon McVittie)
[2015-06-09] libplist 1.12-3 MIGRATED to testing (Britney)
[2015-06-02] Accepted libplist 1.12-3 (source amd64 all) into unstable (Chow Loong Jin)
[2015-06-02] Accepted libplist 1.12-2 (source amd64 all) into unstable (Chow Loong Jin)
[2014-10-26] Accepted libplist 1.12-1 (source amd64 all) into experimental, experimental (Chow Loong Jin)
[2014-04-04] libplist 1.11-3 MIGRATED to testing (Debian testing watch)
[2014-03-29] Accepted libplist 1.11-3 (source amd64 all) (Chow Loong Jin)
[2014-03-25] Accepted libplist 1.11-2 (source amd64 all) (Chow Loong Jin)
[2014-03-25] Accepted libplist 1.11-1 (source amd64 all) (Chow Loong Jin)
[2013-09-26] libplist 1.10-1 MIGRATED to testing (Debian testing watch)
[2013-09-15] Accepted libplist 1.10-1 (source amd64 all) (Chow Loong Jin)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 1

links

homepage
lintian (0, 2)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.0.0-5
1 bug