openSUSE-SU-2026:22128-1
openSUSE-SU-2026:22128-1 · Security update for libxls
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix use of uninitialized memory in xls_parseWorkBook * Fix out-of-bounds reads in the formula dumper * Handle allocation failures in OLE, workbook and string code * Read SummaryInformation streams at their real size * Keep full precision when converting numeric cells to strings * Fix "creation of UTF-8 locale failed" in xls2csv Update to release 1.6.3: * Fix style record size check on big-endian systems * Fix header include in C++ mode * Fix buffer overflows when parsing style records * Fix infinite loop with self-referencing sectors
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
libxls openSUSE:Leap 16.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.6.4-bp160.1.1
Actualiza a 1.6.4-bp160.1.1