Kukanganisa kuviri muLibreOffice

Ruzivo rwekusagadzikana kuviri mune yakavhurika-sosi hofisi suite LibreOffice yakaburitswa, iyo ine njodzi zvakanyanya iyo inogona kubvumira kodhi kuurayiwa kana uchivhura gwaro rakagadzirwa. Kusagadzikana kwekutanga kwakabatwa chinyararire mukuburitswa kwaKurume kweLibreOffice 7.4.6 uye 7.5.1, uye yechipiri muMay inogadziridza yeLibreOffice 7.4.7 uye 7.5.3.

Kusagadzikana kwekutanga (CVE-2023-0950) kungangobvumira kuitisa kodhi kana uchivhura spreadsheet ine akagadziridzwa mafomula akadai seAGGREGATE, anopfuudza mashoma ma paramita pane aitarisirwa. Nyaya yacho inokonzerwa nearray index underflow muformula parsing code (ScInterpreter) inoshandiswa kugadzirisa maspredishiti.

Kusagadzikana kwechipiri (CVE-2023-2255) inobvumira munhu anorwisa kuti agadzire gwaro rakagadzirwa iro, kana ravhurwa, rinotakura zvinongedzo zvekunze pasina kukurudzira kana yambiro. Izvi hazvienderane nemaitiro eLibreOffice anotarisirwa, kureva kuratidza yambiro kana uchirodha zvinhu zvakabatana. Nyaya iyi inokonzereswa nekukanganisika mukodhi yekukumbira mvumo paunenge uchishandisa "Floating Frames" maitiro, akafanana neHTML's iframe, iyo inobvumira kubatanidzwa kwekunze kwefaira remukati mugwaro.

Source: opennet.ru

Voeg