N\u00eb versionin e ri t\u00eb paket\u00ebs zyrtare Apache OpenOffice 4.1.15, pa shum\u00eb zhurm\u00eb (informacioni u zbulua disa dit\u00eb pas lirimit dhe fillimisht informacionet p\u00ebr dob\u00ebsit\u00eb nuk u p\u00ebrmend\u00ebn n\u00eb list\u00ebn e ndryshimeve), jan\u00eb hequr kat\u00ebr dob\u00ebsi: <\/p>\n
\n
Vulnerabiliteti CVE-2023-1183 lejon shkrimin e t\u00eb dh\u00ebnave n\u00eb nj\u00eb skedar t\u00eb rast\u00ebsish\u00ebm n\u00eb sistem, p\u00ebr aq sa lejojn\u00eb t\u00eb drejtat e aksesit, kur hapen skedar\u00eb OBD (Office Binder Document) t\u00eb formatuar posa\u00e7\u00ebrisht n\u00eb OpenOffice Base. Sulmi realizohet p\u00ebrmes shtimit t\u00eb nj\u00eb skedari n\u00eb dokument me emrin «database\/script» me komand\u00ebn SCRIPT, p\u00ebrmbajtja e t\u00eb cilit shkruhet n\u00eb nj\u00eb skedar t\u00eb ri, rruga e t\u00eb cilit mund t\u00eb p\u00ebrcaktohet nga sulmuesi.\n
Dob\u00ebsia CVE-2012-5639 lejon automatikisht ngarkimin dhe hapjen e burimeve t\u00eb brendshme ose t\u00eb jashtme pa nxjerr\u00eb nj\u00eb paralajm\u00ebrim p\u00ebr p\u00ebrdoruesin. Kjo dob\u00ebsi u identifikua n\u00eb LibreOffice n\u00eb vitin 2012, por raporti p\u00ebr problemin u mbyll si jo korrekt. Megjithat\u00eb, dob\u00ebsia u p\u00ebrmir\u00ebsua n\u00eb LibreOffice 4.2 n\u00eb vitin 2014, por nuk u v\u00ebrejt n\u00eb OpenOffice.\n
Dob\u00ebsia CVE-2022-43680, potencialisht lejon ekzekutimin e kodit t\u00eb p\u00ebrdoruesit gjat\u00eb hapjes s\u00eb dokumenteve t\u00eb formatuara ve\u00e7mas n\u00eb situata q\u00eb mungon memorie p\u00ebr p\u00ebrpunimin e tyre. Kjo dob\u00ebsi shkakton qasje n\u00eb memori pas lirimit t\u00eb saj (Use after free) p\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb bibliotek\u00ebn libexpat, e cila p\u00ebrdoret p\u00ebr analizimin e t\u00eb dh\u00ebnave n\u00eb formatin XML. Problemi \u00ebsht\u00eb rregulluar n\u00eb libexpat 2.4.9.\n
Dob\u00ebsia CVE-2023-47804 lejon vendosjen e nj\u00eb lidhjeje n\u00eb dokument q\u00eb th\u00ebrret nj\u00eb makro me argumente t\u00eb rast\u00ebsishme, duke shfryt\u00ebzuar k\u00ebshtu ekzekutimin e skriptit t\u00eb p\u00ebrdoruesit kur ai klikon n\u00eb k\u00ebt\u00eb lidhje ose gjat\u00eb aktivizimit automatike t\u00eb ngjarjeve t\u00eb lidhura me dokumentin pa konfirmim paraprak t\u00eb veprimit. Kjo dob\u00ebsi p\u00ebrcakton nj\u00eb vektor t\u00eb ri sulmi p\u00ebr problemin CVE-2022-47502, i cili u rregullua n\u00eb OpenOffice 4.1.14. <\/ul>\n