Pambuyo pa miyezi itatu yachitukuko ndi zaka zisanu ndi ziwiri kuchokera pamene kumasulidwa komaliza komaliza, kumasulidwa kwa ofesi ya Apache OpenOffice 4.1.10 kunapangidwa, yomwe inakonza zokonza ziwiri. Maphukusi okonzeka amakonzekera Linux, Windows ndi macOS.
Kutulutsidwako kumakonza chiwopsezo (CVE-2021-30245) chomwe chimalola kuti khodi yosasinthika ichitike mudongosolo mukadina ulalo wopangidwa mwapadera pachikalata. Kusatetezekako kudachitika chifukwa cholakwika pakukonza maulalo a hypertext omwe amagwiritsa ntchito ma protocol ena kupatula "http://" ndi "https://", monga "smb://" ndi "dav://".
Mwachitsanzo, wowukira atha kuyika fayilo yomwe ingathe kuchitika pa seva yawo ya SMB ndikuyika ulalo wake muzolemba. Wogwiritsa ntchito akadina ulalowu, fayilo yomwe yafotokozedwayo idzachitidwa popanda chenjezo. Kuukira kwawonetsedwa pa Windows ndi Xubuntu. Kuti mutetezeke, OpenOffice 4.1.10 idawonjezeranso kukambirana komwe kumafuna wogwiritsa ntchito kutsimikizira ntchitoyo akamatsatira ulalo wa chikalata.
Ofufuza omwe adazindikira vutoli adawona kuti si Apache OpenOffice yokha, komanso LibreOffice yomwe imakhudzidwa ndi vutoli (CVE-2021-25631). Kwa LibreOffice, kukonzaku kukupezeka ngati chigamba chomwe chikuphatikizidwa muzotulutsa za LibreOffice 7.0.5 ndi 7.1.2, koma chimangokonza vutoli papulatifomu ya Windows (mndandanda wazowonjezera mafayilo oletsedwa wasinthidwa. ). Madivelopa a LibreOffice anakana kuphatikiza kukonza kwa Linux, ponena kuti vutoli silinali m'dera lawo laudindo ndipo liyenera kuthetsedwa kumbali ya magawo ogawa / ogwiritsa ntchito. Kuphatikiza pa maofesi a OpenOffice ndi LibreOffice, vuto lofananalo lidapezekanso mu Telegraph, Nextcloud, VLC, Bitcoin/Dogecoin Wallet, Wireshark ndi Mumble.
Source: opennet.ru