Ubuntu 16.04 ESM : openpyxl vulnerability (USN-4821-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4821-1 advisory. It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or other...

airtestproject (>=0.1.0 <=0.1.2), centercitypcs-utils (>=0.2.0 <=0.2.6) +22 more potentially affected by CVE-2017-5992 via openpyxl (>=1.1.0 <=2.4.11)

openpyxl PYPI version =1.1.0, =0.1.0, =0.2.0, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =2.0.2, =0.260128.9, =1.3.0, =4.2.1, =0.1.0, =0.9.0, =0.10.1 and more Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

DEBIAN-CVE-2017-5992

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

CVE-2017-5992

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

airtestproject (>=0.1.0 <=0.1.2), commcaretranslationchecker (>=0.9.2 <=0.9.2.41) +11 more potentially affected by CVE-2017-5992 via openpyxl (>=1.1.0 <=2.4.0)

openpyxl PYPI version =1.1.0, =0.1.0, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =1.3.0, =0.1.0, =0.9.0, =0.9.0, =1.6.0, =0.1.3.5, =1.6.2 Source cves: CVE-2017-5992 Source advisory: OSV:PYSEC-2017-48...