Kua huraina ngā kōrero mō ngā ngoikoretanga e rua i roto i te huinga tari tuwhera a LibreOffice, ko te mea tino morearea ka taea te whakahaere waehere i te wā e whakatuwhera ana i tētahi tuhinga i hangaia mō tētahi kaupapa motuhake. I whakatikatikaina pukutia te ngoikoretanga tuatahi i roto i ngā putanga o Poutū-te-rangi o LibreOffice 7.4.6 me 7.5.1, me te tuarua i roto i ngā whakahoutanga o Mei o LibreOffice 7.4.7 me 7.5.3.
Ko te ngoikoretanga tuatahi (CVE-2023-0950) ka āhei pea te whakahaere waehere i te wā e whakatuwhera ana i tētahi ripanga tātai kei roto ngā tātai kua whakarerekētia motuhake, pērā i te AGGREGATE, he iti ake ngā tawhā e tukuna ana i te mea i tumanakohia. Ko te take o te raruraru he rerenga taupū arai kei raro i te waehere wetewete tātai (ScInterpreter) e whakamahia ana hei tukatuka i ngā ripanga tātai.
Ko te ngoikoretanga tuarua (CVE-2023-2255) ka taea e te kaiwhakaeke te waihanga i tētahi tuhinga i hangaia mō tētahi kaupapa motuhake, ā, ina whakatuwheratia, ka utaina ngā hononga o waho me te kore he akiaki, he whakatūpato rānei. Kāore tēnei e rite ana ki te whanonga i whakaarohia e LibreOffice, arā, ko te whakaatu i tētahi whakatūpato ina utaina ngā ihirangi hono. Ko te take o te raruraru he hapa i roto i te waehere tono whakaaetanga ina whakamahia ana te tikanga "Floating Frames", he rite ki te iframe o HTML, e taea ai te whakauru hihiri o ngā ihirangi kōnae o waho ki roto i tētahi tuhinga.
Source: opennet.ru
