Lucene search

K
suseSuseOPENSUSE-SU-2021:0812-1
HistoryMay 30, 2021 - 12:00 a.m.

Security update for libxls (moderate)

2021-05-3000:00:00
lists.opensuse.org
11
libxls
update
vulnerability
release 1.6.2
null pointer dereferences
cve-2020-27819
biff5
xls files
performance
truncated files
extra column bug
rstring records
opensuse leap 15.2
zypper patch

EPSS

0.001

Percentile

30.2%

An update that fixes one vulnerability is now available.

Description:

This update for libxls fixes the following issues:

libxsl was updated to release 1.6.2:

  • Fix NULL pointer dereferences in the xls2csv tool [boo#1179532]
    [CVE-2020-27819]

Update to release 1.6.1

  • Enabled decoding of non-Unicode character sets in older (BIFF5) XLS
    files.
  • Improved string conversion performance in newer files.

update to 1.5.3:

  • Allow truncated XLS files
  • Fix long-standing “extra column” bug #73
  • Support for RSTRING records (rich-text cells in older BIFF5 files)
    tidyverse/readxl#611

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2021-812=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm

EPSS

0.001

Percentile

30.2%