Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0142-1

Опубликовано: 21 мая 2022
Источник: suse-cvrf

Описание

Security update for libxls

This update for libxls fixes the following issues:

  • CVE-2021-27836: Fixed possible NULL pointer dereference via crafted XLS (boo#1192323)

Список пакетов

SUSE Package Hub 15 SP3
libxls-devel-1.6.2-bp153.2.6.1
libxls-tools-1.6.2-bp153.2.6.1
libxlsreader8-1.6.2-bp153.2.6.1
openSUSE Leap 15.3
libxls-devel-1.6.2-bp153.2.6.1
libxls-tools-1.6.2-bp153.2.6.1
libxlsreader8-1.6.2-bp153.2.6.1

Ссылки

Описание

An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file.

Затронутые продукты
SUSE Package Hub 15 SP3:libxls-devel-1.6.2-bp153.2.6.1
SUSE Package Hub 15 SP3:libxls-tools-1.6.2-bp153.2.6.1
SUSE Package Hub 15 SP3:libxlsreader8-1.6.2-bp153.2.6.1
openSUSE Leap 15.3:libxls-devel-1.6.2-bp153.2.6.1
Ссылки