Advisories » MGASA-2016-0229

Updated libimobiledevice packages fix CVE-2016-5104

Publication date: 22 Jun 2016
Modification date: 22 Jun 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-5104

Description

Updated libimobiledevice and usbmuxd package fixes security vulnerability:

The libimobiledevice and libusbmuxd libraries open a socket that listens on all
available network interfaces, rather than just the loopback interface as was
intended (CVE-2016-5104).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=18559
• http://www.openwall.com/lists/oss-security/2016/05/26/6
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5104

SRPMS

5/core

• libimobiledevice-1.1.6-4.1.mga5
• usbmuxd-1.0.9-6.1.mga5