N\u00eb versionin e fundit t\u00eb paket\u00ebs office Apache OpenOffice 4.1.15, pa shum\u00eb buj\u00eb (informacioni u zbulua disa dit\u00eb pas l\u00ebshimit dhe fillimisht informacionet p\u00ebr dob\u00ebsit\u00eb nuk u p\u00ebrmend\u00ebn n\u00eb list\u00ebn e ndryshimeve), jan\u00eb rregulluar kat\u00ebr dob\u00ebsi: <\/p>\n
\n
K\u00ebrc\u00ebnimi CVE-2023-1183 lejon shkruarjen e t\u00eb dh\u00ebnave n\u00eb nj\u00eb skedar t\u00eb rast\u00ebsish\u00ebm n\u00eb sistem, p\u00ebr aq sa e lejojn\u00eb p\u00ebrgjegj\u00ebsit\u00eb e aksesit, kur hapen skedar\u00ebt e formatuar posa\u00e7\u00ebrisht OBD (Office Binder Document) n\u00eb OpenOffice Base. Sulmi realizohet p\u00ebrmes shtimit t\u00eb skedarit t\u00eb 'database\/script' n\u00eb dokument me komand\u00ebn SCRIPT, p\u00ebrmbajtja e t\u00eb cilit sh\u00ebnohet n\u00eb nj\u00eb skedar t\u00eb ri, rruga e t\u00eb cilit mund t\u00eb caktohet nga sulmuesi.\n
Dob\u00ebsia CVE-2012-5639 lejon p\u00ebr t\u00eb shkarkuar dhe hapur automatikisht burime t\u00eb brendshme ose t\u00eb jashtme pa njoftuar p\u00ebrdoruesin. Dob\u00ebsia u identifikua n\u00eb LibreOffice n\u00eb vitin 2012, por raporti p\u00ebr problemin u mbyll si i pasakt\u00eb. Megjithat\u00eb, dob\u00ebsia u rregullua n\u00eb LibreOffice 4.2 n\u00eb vitin 2014, por nuk u v\u00ebrejt n\u00eb OpenOffice.\n
Dob\u00ebsia CVE-2022-43680, potencialisht lejon ekzekutimin e kodit tuaj kur hapen dokumente t\u00eb p\u00ebrgatitura posa\u00e7\u00ebrisht n\u00eb situata kur mungon memorie p\u00ebr p\u00ebrpunimin e tyre. Dob\u00ebsia \u00e7on n\u00eb akses n\u00eb memorie pas lirimit t\u00eb saj (Use after free) p\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb bibliotek\u00ebn libexpat, e cila p\u00ebrdoret p\u00ebr analizimin e t\u00eb dh\u00ebnave n\u00eb formatin XML. Problemi \u00ebsht\u00eb rregulluar n\u00eb libexpat 2.4.9.\n
Dob\u00ebsia CVE-2023-47804 lejon vendosjen e nj\u00eb linku n\u00eb dokument q\u00eb aktivizon nj\u00eb makros me argumente t\u00eb rast\u00ebsishme, duke arritur ekzekutimin e skriptit tuaj kur p\u00ebrdoruesi shtyp n\u00eb k\u00ebt\u00eb lidhje ose kur ndodhin automatikisht ngjarje t\u00eb lidhura me dokumentin pa konfirmimin paraprak t\u00eb operacionit. Dob\u00ebsia p\u00ebrcakton nj\u00eb vektor t\u00eb ri sulmi p\u00ebr problemin CVE-2022-47502, i rregulluar n\u00eb OpenOffice 4.1.14. <\/ul>\n