openSUSE-SU-2026:22128-1
openSUSE-SU-2026:22128-1 · Security update for libxls
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix use of uninitialized memory in xls_parseWorkBook * Fix out-of-bounds reads in the formula dumper * Handle allocation failures in OLE, workbook and string code * Read SummaryInformation streams at their real size * Keep full precision when converting numeric cells to strings * Fix "creation of UTF-8 locale failed" in xls2csv Update to release 1.6.3: * Fix style record size check on big-endian systems * Fix header include in C++ mode * Fix buffer overflows when parsing style records * Fix infinite loop with self-referencing sectors
Fix available
- Published
- Updated
Stack: system
Affected products and versions
libxls openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 1.6.4-bp160.1.1
Update to 1.6.4-bp160.1.1