Fedora 27: 2017-ea4ed9e540 Critical: freexl Remote Code Execution

FreeXL is a library to extract valid data

from within an Excel spreadsheet (.xls)

Design goals:

* simple and lightweight

* stable, robust and efficient

* easily and universally portable

* completely ignore any GUI-related oddity

This update fixes a Cisco Talos CVE: "A specially crafted XLS file can cause a

memory corruption resulting in remote code execution. An attacker can send

malicious XLS file to trigger this vulnerability."

[ 1 ] Bug #1489621 - freexl-1.0.4 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1489621

su -c 'dnf upgrade freexl' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org