Kusagadzikana muLibreOffice iyo inobvumira kuita kodhi kana uchivhura magwaro akashata

Muhofisi yeLibreOffice suite kuzivikanwa kusagadzikana (CVE-2019-9848), iyo inogona kushandiswa kuita zvisina tsarukano kodhi pakuvhura magwaro akagadzirirwa neanorwisa.

Kusagadzikana kunokonzerwa nenyaya yekuti chikamu cheLibreLogo, chakagadzirirwa kudzidzisa hurongwa uye kuisa vector mifananidzo, inoshandura mashandiro ayo muPython kodhi. Nekugona kuita LibreLogo mirairo, anorwisa anogona kuita kuti chero Python kodhi iite mukati meiyo yazvino mushandisi chikamu nekushandisa iyo "run" murairo wakapihwa muLibreLogo. Kubva kuPython, uchishandisa iyo system () basa, iwe unogona, zvakare, kufonera arbitrary system mirairo.

LibreLogo chinhu chinosarudzika, asi LibreOffice inopa macros nekusarudzika iyo inokutendera kuti ufonere LibreLogo uye haidi kusimbiswa kwekushanda uye usaratidze yambiro, kunyangwe iyo yakanyanya kudzivirira macro mode inogoneswa (kusarudza iyo "Yakanyanya Kunyanya" nhanho. )
Kuti urwise, unogona kusunga macro akadaro kune chibatiso chechiitiko chinokonzeresa, semuenzaniso, kana mbeva yechitubu ichitenderedzwa pamusoro peimwe nzvimbo kana iyo yekuisa inotariswa payakaiswa pagwaro (iyo onFocus chiitiko). Nekuda kweizvozvo, pakuvhura gwaro rakagadzirirwa neanorwisa, zvinokwanisika kuwana yakavanzika kuurayiwa kwePython kodhi, zvisingazivikanwe nemushandisi. Semuenzaniso, mumuenzaniso wekushandisa wakaratidzwa, pakuvhura gwaro, system calculator inotangwa pasina yambiro.

Kusagadzikana muLibreOffice iyo inobvumira kuita kodhi kana uchivhura magwaro akashata

Kusagadzikana kwakagadziriswa chinyararire muLibreOffice 6.2.5 update, yakaburitswa munaChikunguru 1, asi sezvazvakazoitika, dambudziko harina kubviswa zvachose (kungodaidza LibreLogo kubva ku macros kwakavharwa) uye ramba usina kururamiswa mamwe mavector ekurwisa. Pamusoro pezvo, nyaya yacho haina kugadziriswa mukuburitswa kwe6.1.6, inokurudzirwa vashandisi vebhizinesi. Kusagadzikana kwakarongwa kunyatsogadziriswa mukuburitswa kweLibreOffice 6.3, inotarisirwa svondo rinouya. Kusvikira iyo yakazara update yaburitswa, vashandisi vanorayirwa kuti vadzime pachena chikamu cheLibreLogo, icho chinowanikwa nekusarudzika mukugovera kwakawanda. Kusagadzikana kwakagadziriswa mukati Debian, Fedora, SUSE/openSUSE ΠΈ Ubuntu.

Source: opennet.ru

Voeg