Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 585
Alerts This Week
Warning Icon 1 585

Debian 8 DSA-3208-1 Critical: Freexl Code Execution Risk

debian
Calendar Grey March 29, 2015
Debian Logo
Numerous vulnerabilities in the freexl library could result in service disruption or unauthorized code execution, requiring immediate patching.
Jodie Cunningham discovered multiple vulnerabilities in freexl, a library to read Microsoft Excel spreadsheets, which might result in denial of service or the execution of arbitrar...
Topics%20covered

Topics Covered

security advisory denial of service critical code execution debian freexl

Summary

Jodie Cunningham discovered multiple vulnerabilities in freexl, a
library to read Microsoft Excel spreadsheets, which might result in
denial of service or the execution of arbitrary code if a malformed Excel
file is opened.

For the stable distribution (wheezy), these problems have been fixed in
version 1.0.0b-1+deb7u1.

For the upcoming stable distribution (jessie), these problems have been
fixed in version 1.0.0g-1+deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 1.0.0g-1+deb8u1.

We recommend that you upgrade your freexl packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: freexl
CVE ID: CVE-2015-2753 CVE-2015-2754 CVE-2015-2776

Topics%20covered

Topics Covered

security advisory denial of service critical code execution debian freexl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.