openSUSE-SU-2026:22128-1
openSUSE-SU-2026:22128-1 · Security update for libxls
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix use of uninitialized memory in xls_parseWorkBook * Fix out-of-bounds reads in the formula dumper * Handle allocation failures in OLE, workbook and string code * Read SummaryInformation streams at their real size * Keep full precision when converting numeric cells to strings * Fix "creation of UTF-8 locale failed" in xls2csv Update to release 1.6.3: * Fix style record size check on big-endian systems * Fix header include in C++ mode * Fix buffer overflows when parsing style records * Fix infinite loop with self-referencing sectors
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
libxls openSUSE:Leap 16.0
- Затронутые диапазоны версий
- ECOSYSTEM: < 1.6.4-bp160.1.1
Обновитесь до 1.6.4-bp160.1.1