portage-ng / portage / dev-libs / freexl / 2.0.0-r1
portage-ng glsa
2 advisories reference dev-libs/freexl · none place version 2.0.0-r1 in a vulnerable range
▸ GLSA 202007-44 FreeXL: Multiple vulnerabilities this version unaffected normal remote 2020-07-27

Multiple vulnerabilities have been found in FreeXL, the worst of which could result in a Denial of Service condition.

Announced
2020-07-27
Revised
2020-07-27
Access
remote
Bugs
#648700
Advisory
https://security.gentoo.org/glsa/202007-44

Affected packages

PackageArchVulnerableUnaffected
dev-libs/freexl*< 1.0.5>= 1.0.5

Background

FreeXL is an open source library to extract valid data from within an Excel (.xls) spreadsheet.

Description

Multiple vulnerabilities have been discovered in FreeXL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All FreeXL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/freexl-1.0.5"

References

▸ GLSA 201606-15 FreeXL: Multiple vulnerabilities this version unaffected normal remote 2016-06-26

Multiple vulnerabilities have been found in FreeXL, allowing remote attackers to executive arbitrary code or cause Denial of Service.

Announced
2016-06-26
Revised
2016-06-26
Access
remote
Bugs
#544426
Advisory
https://security.gentoo.org/glsa/201606-15

Affected packages

PackageArchVulnerableUnaffected
dev-libs/freexl*< 1.0.1>= 1.0.1

Background

FreeXL is an open source library to extract valid data from within an Excel (.xls) spreadsheet.

Description

FreeXL’s shared strings and workbook functions are vulnerable to the remote execution of arbitrary code and Denial of Service. This can be achieved through specially crafted workbooks from attackers.

Impact

Remote attackers could potentially execute arbitrary code or cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All FreeXL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose "dev-libs/freexl-1.0.1"

References