Zambiri zokhudzana ndi ziwopsezo ziwiri muofesi yotsegulira gwero LibreOffice zawululidwa, zowopsa kwambiri zomwe zitha kuloleza kukhazikitsidwa kwa ma code mukatsegula chikalata chopangidwa mwapadera. Chiwopsezo choyamba chidasinthidwa mwakachetechete pakutulutsa kwa Marichi kwa LibreOffice 7.4.6 ndi 7.5.1, ndipo chachiwiri muzosintha za Meyi za LibreOffice 7.4.7 ndi 7.5.3.
Chiwopsezo choyamba (CVE-2023-0950) chitha kuloleza kugwiritsa ntchito ma code mukatsegula spreadsheet yokhala ndi ma formula osinthidwa mwapadera, monga AGGREGATE, omwe amadutsa magawo ochepa kuposa momwe amayembekezera. Vutoli limadza chifukwa cha kuchulukirachulukira kwa kalozera kameneka mu formula parsing code (ScInterpreter) yomwe imagwiritsidwa ntchito pokonza maspredishiti.
Chiwopsezo chachiwiri (CVE-2023-2255) chimalola wowukira kuti apange chikalata chopangidwa mwapadera chomwe, chikatsegulidwa, chimanyamula maulalo akunja popanda kuwopseza kapena kuchenjeza. Izi sizikugwirizana ndi zomwe LibreOffice akufuna kuchita, zomwe ndikuwonetsa chenjezo mukatsitsa zolumikizidwa. Nkhaniyi imayamba chifukwa cha zolakwika pamakina ofunsira zilolezo mukamagwiritsa ntchito makina a "Floating Frames", ofanana ndi iframe ya HTML, yomwe imalola kuphatikizika kwa mafayilo akunja muzolemba.
Source: opennet.ru
