Back Linuxsecurity

Fedora 44 libxls Vital Updates for Important Information Disclosure Fixes

Linuxsecurity •LinuxSecurity Advisories • August 25, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

This is libxls, a C library for reading Excel files in the old binary OLE

format, plus a command-line tool for converting XLS to CSV (named,

appropriately enough, libxls2csv).

Backport CVE patches fixes CVE-2026-26824 (rhbz#2484566) fixes CVE-2026-26825 (rhbz#2484567)

* Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824 (rhbz#2484566) - fixes CVE-2026-26825 (rhbz#2484567) * Thu Jul 16 2026 Fedora Release Engineering - 1.6.3-8 - Rebuilt for

[ 1 ] Bug #2484566 - CVE-2026-26824 libxls: libxls: Information disclosure via crafted XLS file processing [fedora-all] [ 2 ] Bug #2484567 - CVE-2026-26825 libxls: libxls: Information disclosure via use of uninitialized memory [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-73af37bdd0' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 44 and 43 libxls Patches Address Critical Information Disclosure Vulnerabilities On August 15, 2026, Fedora released vital updates for libxls, a C library for reading Excel files, addressing two critical vulnerabilities (CVE-2026-26824 and CVE-2026-26825) that could lead to information disclosure via crafted XLS file processing and uninitialized memory use. These vulnerabilities affect Fedora 43 and 44 systems. The patches were backported by Elliott Sales de Andrade and can be installed using the 'dnf' update program. The vulnerabilities were published on June 3, 2026, and are now patched, but users are urged to update their systems promptly to mitigate potential risks. The updates are crucial for maintaining the security of systems utilizing the libxls library, especially in environments handling sensitive data. 2 sources 31

Extracted Entities

Fedora 44 libxls Vital Updates for Important Information Disclosure Fixes

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (1)

Platforms (1)