Kamora likhoeli tse tharo tsa nts'etsopele le lilemo tse supileng ho tloha tokollong ea ho qetela ea bohlokoa, ho ile ha thehoa tokollo ea tokiso ea ofisi ea Apache OpenOffice 4.1.10, e sisintseng litokiso tse peli. Liphutheloana tse seng li entsoe li lokiselitsoe Linux, Windows le macOS.
Tokollo e lokisa ts'oaetso (CVE-2021-30245) e lumellang hore khoutu e etsoe ka har'a sistimi ha o tobetsa sehokelo se entsoeng ka mokhoa o ikhethileng tokomaneng. Kotsi e bakoa ke phoso ha ho sebetsoa lihokelo tsa hypertext tse sebelisang liprothocol ntle le "http://" le "https://", joalo ka "smb://" le "dav://".
Ka mohlala, mohlaseli a ka beha faele e sebetsang ho seva sa bona sa SMB mme a kenya sehokelo ho eona tokomaneng. Ha mosebelisi a tobetsa sehokelo sena, faele e boletsoeng e tla phethisoa e tla etsoa ntle le temoso. Tlhaselo e bontšitsoe ho Windows le Xubuntu. Bakeng sa ts'ireletso, OpenOffice 4.1.10 e kentse puisano e eketsehileng e hlokang hore mosebelisi a netefatse ts'ebetso ha a latela sehokelo tokomaneng.
Bafuputsi ba hlokometseng bothata ba hlokometse hore ha se Apache OpenOffice feela, empa le LibreOffice e anngoe ke bothata (CVE-2021-25631). Bakeng sa LibreOffice, tokiso e se e fumaneha ka mokhoa oa patch e kenyellelitsoeng liphatlalatsong tsa LibreOffice 7.0.5 le 7.1.2, empa e lokisa bothata feela sethaleng sa Windows (lenane la li-extensions tsa lifaele tse thibetsoeng le ntlafalitsoe. ). Bahlahisi ba LibreOffice ba hanne ho kenyelletsa tokiso bakeng sa Linux, ba bolela taba ea hore bothata bo ne bo se sebakeng sa bona sa boikarabello mme bo lokela ho rarolloa ka lehlakoreng la libaka tsa kabo / basebelisi. Ntle le li-suites tsa ofisi tsa OpenOffice le LibreOffice, bothata bo tšoanang bo ile ba boela ba fumanoa ho Telegram, Nextcloud, VLC, Bitcoin/Dogecoin Wallet, Wireshark le Mumble.
Source: opennet.ru