Debian Libimobiledevice vulnerabilities

CVE-2016-5104 [MEDIUM] CVE-2016-5104: libimobiledevice - The socket_create function in common/socket.c in libimobiledevice and libusbmuxd... The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket. Scope: local bookworm: resolved (fixed in 1.2.0+dfsg-3) bullseye: resolved (fixed in 1.2.0+dfsg-3) forky: resolved (fixed in 1.2.0+df

CVE-2013-2142 [LOW] CVE-2013-2142: libimobiledevice - userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not se... userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/. Scope: local bookworm: resolved (fixed in 1