Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Debian DSA-4173-1 Critical: r-cran-readxl Package Code Execution

debian
Calendar Grey April 16, 2018
Debian Logo
Several vulnerabilities in r-cran-readxl have the potential to permit code execution through improperly formatted spreadsheets. It is advisable to upgrade.
Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files (via the integrated libxls library), which could result in the execution of arbitrary...
Topics%20covered

Topics Covered

security advisory debian package update arbitrary code execution excel files

Summary

Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R
package to read Excel files (via the integrated libxls library), which
could result in the execution of arbitrary code if a malformed
spreadsheet is processed.

For the stable distribution (stretch), these problems have been fixed in
version 0.1.1-1+deb9u1.

We recommend that you upgrade your r-cran-readxl packages.

For the detailed security status of r-cran-readxl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/r-cran-readxl

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: r-cran-readxl
CVE ID: CVE-2017-2896 CVE-2017-2897 CVE-2017-2919 CVE-2017-12110

Topics%20covered

Topics Covered

security advisory debian package update arbitrary code execution excel files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.