Fedora alert FEDORA-2015-3372 (freexl)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 20 Update: freexl-1.0.0i-1.fc20 | |
| Date: | Wed, 18 Mar 2015 10:22:55 +0000 | |
| Message-ID: | <20150318102255.8047760875B5@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-3372 2015-03-09 04:38:34 -------------------------------------------------------------------------------- Name : freexl Product : Fedora 20 Version : 1.0.0i Release : 1.fc20 URL : http://www.gaia-gis.it/FreeXL Summary : Library to extract data from within an Excel spreadsheet Description : FreeXL is a library to extract valid data from within an Excel spreadsheet (.xls) Design goals: * simple and lightweight * stable, robust and efficient * easily and universally portable * completely ignore any GUI-related oddity -------------------------------------------------------------------------------- Update Information: Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document could be used as a "poisoned bait" to maliciously open a security breach. https://groups.google.com/forum/#!topic/spatialite-users/... -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 6 2015 Volker Fröhlich <volker27@gmx.at> 1.0.0i-1 - New release with security fixes * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0f-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0f-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Nov 30 2013 Volker Fröhlich <volker27@gmx.at> 1.0.0f-1 - Drop obsolete patch for aarch64 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1199328 - freexl-1.0.0i is available https://bugzilla.redhat.com/show_bug.cgi?id=1199328 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update freexl' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...