perl-Spreadsheet-XLSX-0.200.0-1.1 RPM for noarch

From OpenSuSE Tumbleweed for noarch

ZIP input is limited to 10,000 entries, 64 MiB per uncompressed member, and
256 MiB of total declared uncompressed data, including unused members.
Members used by the parser are decompressed incrementally and their actual
sizes are checked against the limits and ZIP metadata. Exceeding a limit or
encountering inconsistent sizes raises an exception.

Applications needing different limits can scope them to a parsing
operation:

    local $Spreadsheet::XLSX::MAX_MEMBER_SIZE = 128 * 1024 * 1024;
    local $Spreadsheet::XLSX::MAX_TOTAL_SIZE = 512 * 1024 * 1024;
    local $Spreadsheet::XLSX::MAX_MEMBERS = 20000;
    my $excel = Spreadsheet::XLSX->new($filename);

These limits bound uncompressed input, not the total memory used by parsed
cells and XML processing.

This module is a (quick and dirty) emulation of Spreadsheet::ParseExcel for
Excel 2007 (.xlsx) file format. It supports styles and many of Excel's
quirks, but not all. It populates the classes from Spreadsheet::ParseExcel
for interoperability; including Workbook, Worksheet, and Cell.

Provides

• perl-Spreadsheet-XLSX
• perl(Spreadsheet::XLSX)
• perl(Spreadsheet::XLSX::Fmt2007)
• perl(Spreadsheet::XLSX::Utility2007)

Requires

• perl(:MODULE_COMPAT_5.44.0)
• perl(Archive::Zip) >= 1.180
• perl(Spreadsheet::ParseExcel)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

Artistic-1.0 OR GPL-1.0-or-later

Changelog

* Fri Oct 30 2026 Tina Müller <timueller+perl@suse.de>
  - updated to 0.200.0 (0.20)
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.20  2026-10-29
    - Security: limit ZIP entry counts and uncompressed sizes; read members
      incrementally and reject inconsistent size metadata.
    - Security: validate number format IDs and escape regex lookups to prevent
      regex injection from crafted styles.
    - Security: reject out-of-range date values to prevent excessive CPU usage.
    - Security: validate cell references against XLSX worksheet limits before
      indexing cell arrays, preventing excessive allocation from invalid rows.
    - Add cpanfile for easy dependency installation.
    - Improve Readme.
    0.19  2026-10-29
    - Security: replace string eval of number-format conditions with strict
      numeric comparisons; invalid conditions use the fallback format section.
      CVE-2026-115943 bsc#1288922
      Prevents arbitrary Perl code execution when parsing crafted XLSX files.
    - Add regression tests for numeric conditions and malicious XLSX formats.
* Fri Mar 22 2024 Tina Müller <timueller+perl@suse.de>
  - updated to 0.18
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.18
    - fix RT #117166: unformatted date values can no longer be retrieved, thx to lherschi
* Thu Nov 04 2021 Tina Müller <timueller+perl@suse.de>
  - updated to 0.17
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.17
    - fix RT #139898: missing file from MANIFEST
    - fix RT #127829, #80565, #79016: [Warning] Argument "#N/A" isn't numeric in int
* Tue Oct 26 2021 Tina Müller <timueller+perl@suse.de>
  - updated to 0.16
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.16
    - added GitHub repository
    - fix RT #125112: Update module name in comments and POD
    - improve POD
    - improve kwalitee test
* Wed Nov 04 2015 coolo@suse.com
  - updated to 0.15
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.15
    - revert a numeric formatting change which caused isssues with Spreadsheet::Read.
* Sat Oct 31 2015 coolo@suse.com
  - updated to 0.14
    see /usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
    0.14
    - change default date format to yyyy-mm-dd.  This matches Spreadsheet::ParseExcel.
    - handle xml tag attributes in varying order (RT #86667, et.al.)
* Thu Sep 01 2011 chris@computersalat.de
  - initial package 0.13
    * created by cpanspec 1.78.04

Files

/usr/lib/perl5/vendor_perl/5.44.0/Spreadsheet
/usr/lib/perl5/vendor_perl/5.44.0/Spreadsheet/XLSX
/usr/lib/perl5/vendor_perl/5.44.0/Spreadsheet/XLSX.pm
/usr/lib/perl5/vendor_perl/5.44.0/Spreadsheet/XLSX/Fmt2007.pm
/usr/lib/perl5/vendor_perl/5.44.0/Spreadsheet/XLSX/Utility2007.pm
/usr/share/doc/packages/perl-Spreadsheet-XLSX
/usr/share/doc/packages/perl-Spreadsheet-XLSX/Changes
/usr/share/doc/packages/perl-Spreadsheet-XLSX/README
/usr/share/man/man3/Spreadsheet::XLSX.3pm.gz
/usr/share/man/man3/Spreadsheet::XLSX::Fmt2007.3pm.gz
/usr/share/man/man3/Spreadsheet::XLSX::Utility2007.3pm.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Nov 1 22:36:34 2026