Tom qab peb lub hlis ntawm txoj kev loj hlob thiab xya xyoo txij li thaum kawg tseem ceeb tshaj tawm, kev kho kom raug ntawm chav ua hauj lwm suite Apache OpenOffice 4.1.10 tau tsim, uas tau npaj 2 kho. Cov pob khoom npaj tau npaj rau Linux, Windows thiab macOS.
Qhov kev tso tawm kho qhov muaj qhov tsis zoo (CVE-2021-30245) uas tso cai rau kev txiav txim siab tsis raug cai hauv lub kaw lus thaum nyem rau ntawm qhov txuas tshwj xeeb tsim hauv ib daim ntawv. Qhov tsis zoo yog vim muaj qhov ua yuam kev hauv kev ua cov ntawv txuas hypertext uas siv cov txheej txheem uas tsis yog "http://" thiab "https://", xws li "smb://" thiab "dav://".
Piv txwv li, tus neeg tawm tsam tuaj yeem tso cov ntaub ntawv ua tiav ntawm lawv SMB server thiab ntxig qhov txuas rau nws rau hauv cov ntaub ntawv. Thaum tus neeg siv nyem rau ntawm qhov txuas no, cov ntaub ntawv executable uas tau teev tseg yuav raug tua yam tsis tau ceeb toom. Qhov kev tawm tsam tau tshwm sim hauv Windows thiab Xubuntu. Rau kev nyab xeeb, OpenOffice 4.1.10 tau ntxiv ib qho kev sib tham ntxiv uas yuav tsum kom tus neeg siv paub meej txog qhov kev ua haujlwm thaum ua raws li qhov txuas hauv ib daim ntawv.
Cov kws tshawb fawb uas txheeb xyuas qhov teeb meem tau sau tseg tias tsis yog Apache OpenOffice nkaus xwb, tab sis kuj LibreOffice cuam tshuam los ntawm qhov teeb meem (CVE-2021-25631). Rau LibreOffice, qhov kho tam sim no muaj nyob rau hauv daim ntawv ntawm thaj ua rau muaj nyob rau hauv kev tshaj tawm ntawm LibreOffice 7.0.5 thiab 7.1.2, tab sis nws kho qhov teeb meem nkaus xwb ntawm lub Windows platform (cov npe txwv tsis pub cov ntaub ntawv txuas ntxiv tau hloov kho. ). Cov neeg tsim tawm LibreOffice tsis kam suav nrog kev kho rau Linux, hais txog qhov tseeb tias qhov teeb meem tsis nyob hauv lawv lub luag haujlwm thiab yuav tsum tau daws nyob rau sab ntawm kev faib khoom / neeg siv ib puag ncig. Ntxiv rau OpenOffice thiab LibreOffice chav ua haujlwm suites, ib qho teeb meem zoo sib xws kuj tau kuaj pom hauv Telegram, Nextcloud, VLC, Bitcoin / Dogecoin Hnab, Wireshark thiab Mumble.
Tau qhov twg los: opennet.ru