Chiwopsezo mu LibreOffice chomwe chimalola kuyika ma code mukatsegula zikalata zoyipa

Muofesi ya LibreOffice suite kudziwika kusatetezeka (CVE-2019-9848), yomwe ingagwiritsidwe ntchito popanga ma code osagwirizana potsegula zikalata zokonzedwa ndi wowukira.

Chiwopsezochi chimayamba chifukwa chakuti gawo la LibreLogo, lopangidwira kuphunzitsa mapulogalamu ndikuyika zojambula za vector, limamasulira ntchito zake kukhala Python code. Ndi kuthekera kopereka malangizo a LibreLogo, wowukira atha kupangitsa kuti nambala iliyonse ya Python achite mogwirizana ndi gawo la ogwiritsa ntchito pogwiritsa ntchito lamulo la "run" loperekedwa ku LibreLogo. Kuchokera ku Python, pogwiritsa ntchito dongosolo () ntchito, mutha kuyimbiranso malamulo osagwirizana.

LibreLogo ndi gawo losankha, koma LibreOffice imapereka ma macros mosakhazikika omwe amakulolani kuti muyimbire LibreLogo ndipo safuna kutsimikiziridwa kwa ntchitoyo komanso osawonetsa chenjezo, ngakhale njira yotetezedwa yayikulu ikayatsidwa (kusankha "Wapamwamba Kwambiri" mulingo. ).
Kuti muwukire, mutha kumangirira macro ku chothandizira chochitika chomwe chimayambika, mwachitsanzo, cholozera cha mbewa chikasunthidwa kudera linalake kapena kuyika kolowera kumatsegulidwa pa chikalatacho (chochitika cha onFocus). Zotsatira zake, potsegula chikalata chokonzedwa ndi wowukira, ndizotheka kukwaniritsa zobisika za Python code, osadziwika kwa wogwiritsa ntchito. Mwachitsanzo, mu chitsanzo chogwiritsa ntchito chomwe chikuwonetsedwa, potsegula chikalata, chowerengera chimayambika popanda chenjezo.

Chiwopsezocho chinakhazikitsidwa mwakachetechete pakusintha kwa LibreOffice 6.2.5, komwe kudatulutsidwa pa Julayi 1, koma momwe zidakhalira, vutoli silinatheretu (kungoyimba LibreLogo kuchokera ku macros kudatsekedwa) ndi khalani osakonzedwa ma vector ena owukira. Kuphatikiza apo, vutoli silinathetsedwa pakumasulidwa kwa 6.1.6, komwe kumalimbikitsidwa kwa ogwiritsa ntchito mabizinesi. Chiwopsezochi chikukonzekera kukhazikitsidwa kwathunthu pakutulutsidwa kwa LibreOffice 6.3, yomwe ikuyembekezeka sabata yamawa. Mpaka pomwe kusinthidwa kwathunthu kutulutsidwa, ogwiritsa ntchito amalangizidwa kuti aletse mwatsatanetsatane gawo la LibreLogo, lomwe limapezeka mwachisawawa pamagawidwe ambiri. Kusatetezekako kwakhazikika pang'ono Debian, Fedora, SUSE/OpenSUSE и Ubuntu.

Source: opennet.ru