Tom qab tsib lub hlis ntawm txoj kev loj hlob thiab xya thiab ib nrab xyoo txij li qhov kev tso tawm tseem ceeb dhau los, kev kho kom raug ntawm chav ua haujlwm Apache OpenOffice 4.1.11 tau tsim, uas tau npaj 12 kho. Cov pob khoom npaj tau npaj rau Linux, Windows thiab macOS.
Qhov kev tso tawm tshiab kho peb qhov tsis zoo:
- CVE-2021-33035 - Tso cai rau kev ua tiav thaum qhib cov ntaub ntawv DBF tshwj xeeb. Qhov teeb meem yog tshwm sim los ntawm OpenOffice cia siab rau qhov fieldLength thiab fieldType qhov tseem ceeb nyob rau hauv lub header ntawm DBF cov ntaub ntawv los faib lub cim xeeb, tsis tau kuaj xyuas tias cov ntaub ntawv tiag tiag hauv cov teb sib tw. Txhawm rau ua qhov kev tawm tsam, koj tuaj yeem hais qhia ib hom INTEGER nyob rau hauv qhov chaw tus nqi, tab sis tso cov ntaub ntawv loj dua thiab qhia tus nqi fieldLength uas tsis sib haum rau qhov loj ntawm cov ntaub ntawv nrog hom INTEGER, uas yuav ua rau tus Tsov tus tw ntawm cov ntaub ntawv. los ntawm daim teb uas tau sau tshaj qhov txwv tsis pub. Raws li qhov tshwm sim ntawm kev tswj tsis pub dhau, koj tuaj yeem hloov kho qhov taw qhia rov qab los ntawm kev ua haujlwm thiab, siv cov txheej txheem rov qab-oriented programming (ROP - Rov qab-Oriented Programming), ua tiav kev ua tiav ntawm koj cov cai.
- CVE-2021-40439 yog "Billion luag" DoS nres (XML foob pob), uas ua rau qaug zog ntawm cov khoom siv hauv lub cev thaum ua cov ntaub ntawv tsim tshwj xeeb.
- CVE-2021-28129 - Cov ntsiab lus ntawm DEB pob tau teeb tsa rau ntawm qhov system raws li tus neeg siv tsis yog hauv paus.
Kev hloov tsis ruaj ntseg:
- Qhov loj font loj hauv cov ntawv pab pawg tau nce.
- Ib yam khoom tau ntxiv rau Insert zaub mov los tswj cov teebmeem ntawm Fontwork fonts.
- Ntxiv ib lub cim uas ploj lawm rau cov ntawv qhia zaub mov rau PDF export muaj nuj nqi.
- Qhov teeb meem nrog poob ntawm daim duab thaum txuag hauv ODS hom tau raug daws lawm.
- Ib qho teeb meem nrog qee qhov kev ua haujlwm muaj txiaj ntsig tau raug thaiv los ntawm kev ua haujlwm paub meej dialog ntxiv hauv qhov kev tso tawm dhau los tau raug daws lawm (piv txwv li, qhov kev sib tham tau tshwm sim thaum xa mus rau ntu hauv tib daim ntawv).
Tau qhov twg los: opennet.ru