openSUSE-SU-2026:22128-1
openSUSE-SU-2026:22128-1 · Security update for libxls
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix use of uninitialized memory in xls_parseWorkBook * Fix out-of-bounds reads in the formula dumper * Handle allocation failures in OLE, workbook and string code * Read SummaryInformation streams at their real size * Keep full precision when converting numeric cells to strings * Fix "creation of UTF-8 locale failed" in xls2csv Update to release 1.6.3: * Fix style record size check on big-endian systems * Fix header include in C++ mode * Fix buffer overflows when parsing style records * Fix infinite loop with self-referencing sectors
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
libxls openSUSE:Leap 16.0
- Plages de versions concernées
- ECOSYSTEM: < 1.6.4-bp160.1.1
Mettez à jour vers 1.6.4-bp160.1.1