FreeXL: Multiple vulnerabilities Multiple vulnerabilities have been found in FreeXL, allowing remote attackers to executive arbitrary code or cause Denial of Service. 2016-06-26 2016-06-26 544426 remote 1.0.1 1.0.1

FreeXL is an open source library to extract valid data from within an Excel (.xls) spreadsheet.

FreeXL’s shared strings and workbook functions are vulnerable to the remote execution of arbitrary code and Denial of Service. This can be achieved through specially crafted workbooks from attackers.

Remote attackers could potentially execute arbitrary code or cause Denial of Service.

There is no known workaround at this time.

All FreeXL users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose "dev-libs/freexl-1.0.1" CVE-2015-2753 CVE-2015-2754 CVE-2015-2776 b-man b-man