ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ LibreOffice

ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื™ื– ื“ื™ืกืงืœืึธื•ื–ื“ ื•ื•ืขื’ืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ืคืจื™ื™ ืึธืคื™ืก ืกื•ื•ื™ื˜ LibreOffice, ื“ื™ ืžืขืจืกื˜ ื’ืขืคืขืจืœืขืš ืคื•ืŸ ื•ื•ืึธืก ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ื•ื•ืขืŸ ืขืคืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื“ืึธืงื•ืžืขื ื˜. ื“ืขืจ ืขืจืฉื˜ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืฉื˜ื™ืœ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ ืžืึทืจืฅ ืจื™ืœื™ืกื™ื– 7.4.6 ืื•ืŸ 7.5.1, ืื•ืŸ ื“ื™ ืจื’ืข ืื™ืŸ ื“ื™ ืžื™ื™ึท ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคื•ืŸ LibreOffice 7.4.7 ืื•ืŸ 7.5.3.

ื“ืขืจ ืขืจืฉื˜ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2023-0950) ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื ื•ื•ืขืŸ ืขืคืŸ ืึท ืกืคึผืจืขื“ืฉื™ื˜ ื•ื•ืึธืก ื›ื•ืœืœ ืกืคึผืขืฆื™ืขืœ ืžืึทื“ืึทืคื™ื™ื“ ืคืึธืจืžื•ืœืึทืก, ืึทื–ืึท ื•ื•ื™ AGGREGATE, ืื™ืŸ ื•ื•ืึธืก ื•ื•ื™ื™ื ื™ืงืขืจืข ืคึผืึทืจืึทืžืขื˜ืขืจืก ื–ืขื ืขืŸ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ื•ื•ื™ ื“ืขืจื•ื•ืึทืจื˜. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ืžืขื ื’ืข ืื™ื ื“ืขืงืก ืึธื•ื•ื•ืขืจืคืœืึธื• ืื™ืŸ ื“ื™ ืคืึธืจืžื•ืœืข ืคึผืึทืจืกื™ื ื’ ืงืึธื“ (ScInterpreter) ื’ืขื ื™ืฆื˜ ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืกืคึผืจืขื“ืฉื™ืฅ.

ื“ื™ ืฆื•ื•ื™ื™ื˜ืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2023-2255) ืึทืœืึทื•ื– ืึท ืึทื˜ืึทืงืขืจ ืฆื• ืฆื•ื’ืจื™ื™ื˜ืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื“ืึธืงื•ืžืขื ื˜, ื•ื•ืึธืก, ื•ื•ืขืŸ ืขืคึฟื ื˜, ื•ื•ืขื˜ ืœืึธื“ืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ืขืŸ ืึธืŸ ืคึผืจืึทืžืคึผื˜ื™ื ื’ ืึธื“ืขืจ ื•ื•ืืจืขื ื•ื ื’, ื•ื•ืึธืก ืฉื˜ื™ืžืขืŸ ื ื™ืฉื˜ ืฆื• ื“ื™ ื“ืขืจืงืœืขืจื˜ ื ืึทื˜ื•ืจ ืคื•ืŸ LibreOffice, ื•ื•ืึธืก ื™ืžืคึผืœื™ื™ื– ื•ื•ื™ื™ึทื–ื ื“ื™ืง ืึท ื•ื•ืืจืขื ื•ื ื’. ื•ื•ืขืŸ ืœืึธื•ื“ื™ื ื’ ืฉื™ื™ึทื›ื•ืช ืื™ื ื”ืึทืœื˜. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ืคืœืึธ ืื™ืŸ ื“ื™ ืคึผืขืจืžื™ืฉืึทื ื– ื‘ืขื˜ืŸ ืงืึธื“ ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ "ืคืœืึธื•ื˜ื™ื ื’ ืคืจืึทืžืขืก" ืžืขืงืึทื ื™ื–ืึทื, ืขื ืœืขืš ืฆื• iframes ืื™ืŸ HTML, ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื˜ืขืงืขืก ืฆื• ื–ื™ื™ืŸ ื“ื™ื ืึทืžื™ืงืึทืœืœื™ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ืขื ื“ืึธืงื•ืžืขื ื˜.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’