{"id":101609,"date":"2021-10-12T16:23:09","date_gmt":"2021-10-12T14:23:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-libreoffice-i-apache-openoffice-pozvolyayushhie-obojti-proverku-czifrovoj-podpisi"},"modified":"2021-10-12T16:23:09","modified_gmt":"2021-10-12T14:23:09","slug":"uyazvimosti-v-libreoffice-i-apache-openoffice-pozvolyayushhie-obojti-proverku-czifrovoj-podpisi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-libreoffice-i-apache-openoffice-pozvolyayushhie-obojti-proverku-czifrovoj-podpisi","title":{"rendered":"Vulnerabilitetet n\u00eb LibreOffice dhe Apache OpenOffice q\u00eb lejojn\u00eb kalimin e kontrollit t\u00eb n\u00ebnshkrimit digjital.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb zbuluar informacione p\u00ebr tre vulnerabilitete n\u00eb paketat zyrtare LibreOffice dhe Apache OpenOffice, q\u00eb lejojn\u00eb sulmuesit t\u00eb p\u00ebrgatisin dokumente q\u00eb duken si t\u00eb n\u00ebnshkruara nga burime t\u00eb besueshme ose t\u00eb ndryshojn\u00eb dat\u00ebn e nj\u00eb dokumenti tashm\u00eb t\u00eb n\u00ebnshkruar. Problemet jan\u00eb rregulluar n\u00eb versionet Apache OpenOffice 4.1.11 dhe LibreOffice 7.0.6\/7.1.2 n\u00ebn pretekstin e gabimeve t\u00eb pap\u00ebrfshira n\u00eb siguri (versionet LibreOffice 7.0.6 dhe 7.1.2 u publikuan n\u00eb fillim t\u00eb majit, por informacionet p\u00ebr vulnerabilitetin u zbuluan vet\u00ebm tani). <\/p>\n
\n
CVE-2021-41832, CVE-2021-25635 \u2014 lejon\u00eb q\u00eb nj\u00eb sulmues t\u00eb n\u00ebnshkruaj\u00eb nj\u00eb dokument ODF me nj\u00eb certifikat\u00eb vet\u00eb-n\u00ebnshkruese q\u00eb nuk \u00ebsht\u00eb e besueshme, por duke ndryshuar algoritmin e n\u00ebnshkrimit digjital n\u00eb nj\u00eb vler\u00eb t\u00eb pasakt\u00eb ose t\u00eb pap\u00ebrkrahur, arrin t\u00eb shfaq\u00eb k\u00ebt\u00eb dokument si t\u00eb besuesh\u00ebm (n\u00ebnshkrimi me algorit\u00ebm t\u00eb pasakt\u00eb trajtohej si i sakt\u00eb).\n
CVE-2021-41830, CVE-2021-25633 \u2014 lejon q\u00eb nj\u00eb sulmues, n\u00ebp\u00ebrmjet kombinimit n\u00eb skedar\u00ebt documentsignatures.xml dhe macrosignatures.xml t\u00eb t\u00eb dh\u00ebnave t\u00eb n\u00ebnshkruara me certifikata t\u00eb ndryshme, t\u00eb krijoj\u00eb nj\u00eb dokument ODF ose makro, i cili do t\u00eb shfaqet n\u00eb nd\u00ebrfaqe si t\u00eb besuesh\u00ebm, pavar\u00ebsisht nga prania e p\u00ebrmbajtjes shtes\u00eb t\u00eb vulosur me nj\u00eb certifikat\u00eb tjet\u00ebr.\n
CVE-2021-41831, CVE-2021-25634 \u2014 lejon q\u00eb t\u00eb b\u00ebhen ndryshime n\u00eb nj\u00eb dokument ODF t\u00eb n\u00ebnshkruar me n\u00ebnshkrim digjital, q\u00eb deformojn\u00eb koh\u00ebn e shfaqur t\u00eb krijimit t\u00eb n\u00ebnshkrimit digjital pa shkelur indikacionin e besueshm\u00ebris\u00eb. <\/ul>\n