openSUSE-SU-2017:2537-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2017:2537-1

Related

Published

2017-09-21T06:52:21Z

Modified

2017-09-21T06:52:21Z

Summary

Security update for freexl

Details

This update for freexl to version 1.0.4 fixes several issues.

These security issues were fixed:

CVE-2017-2924: Prevent heap-based buffer overflow in the readlegacybiff function (bsc#1058433).
CVE-2017-2923: Prevent heap-based buffer overflow in the readbiffnext_record function (bsc#1058431).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.4-5.1

{
    "binaries": [
        {
            "libfreexl1": "1.0.4-5.1",
            "freexl-devel": "1.0.4-5.1"
        }
    ]
}