src/endian.c | 15 3 + 12 - 0 !
src/libxls/ole.h | 30 21 + 9 - 0 !
src/libxls/xls.h | 26 21 + 5 - 0 !
src/libxls/xlsstruct.h | 25 12 + 13 - 0 !
src/libxls/xlstool.h | 9 4 + 5 - 0 !
src/ole.c | 601 396 + 205 - 0 !
src/xls.c | 805 541 + 264 - 0 !
src/xlstool.c | 244 95 + 149 - 0 !
8 files changed, 1093 insertions(+), 662 deletions(-)

 updated to current libxls
 Bug report #895564 reveals five CVE reports made public last November;
 these have all been addressed upstream in libxls, see 
 https://github.com/evanmiller/libxls/issues/2 through
 https://github.com/evanmiller/libxls/issues/6.

src/libxls/ole.h | 53 28 + 25 - 0 !
src/libxls/xlstool.h | 53 29 + 24 - 0 !
src/ole.c | 360 215 + 145 - 0 !
src/xls.c | 1123 224 + 899 - 0 !
src/xlstool.c | 156 88 + 68 - 0 !
5 files changed, 584 insertions(+), 1161 deletions(-)

 updated upstream changes
 Bug report #919324 contains two CVE reports against libxls which are, along
 with two more listed at the upstream GitHub repo, fixed in this version of
 readxl via updated files from libxls.