Multiple vulnerabilities have been found in FreeXL, allowing remote attackers to executive arbitrary code or cause Denial of Service.
|Package||dev-libs/freexl on all architectures|
|Affected versions||< 1.0.1|
|Unaffected versions||>= 1.0.1|
FreeXL is an open source library to extract valid data from within an Excel (.xls) spreadsheet.
FreeXL’s shared strings and workbook functions are vulnerable to the remote execution of arbitrary code and Denial of Service. This can be achieved through specially crafted workbooks from attackers.
Remote attackers could potentially execute arbitrary code or cause Denial of Service.
There is no known workaround at this time.
All FreeXL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose "dev-libs/freexl-1.0.1"
June 26, 2016
June 26, 2016: 1