Ukukhishwa kwe-Apache OpenOffice 4.1.11

Ngemva kwezinyanga ezinhlanu zokuthuthukiswa kanye neminyaka eyisikhombisa nengxenye kusukela ekukhululweni okubalulekile kokugcina, ukukhululwa kokulungisa kwe-office suite i-Apache OpenOffice 4.1.11 kwakhiwa, okwaphakamisa ukulungiswa okungu-12. Amaphakheji enziwe ngomumo alungiselelwa i-Linux, iWindows ne-macOS.

Ukukhishwa okusha kulungisa ubungozi obuthathu:

• I-CVE-2021-33035 - Ivumela ukusetshenziswa kwekhodi lapho uvula ifayela le-DBF elakhiwe ngokukhethekile. Inkinga ibangelwa i-OpenOffice ukuthembela esikhaleni Ubude kanye namanani enkambuThayipha kunhlokweni yamafayela e-DBF ukuze kwabiwe inkumbulo, ngaphandle kokuhlola ukuthi uhlobo lwangempela lwedatha ezinkambuni luyafana. Ukuze wenze ukuhlasela, ungacacisa uhlobo lwe-INTEGER ku-fieldType value, kodwa ubeke idatha enkudlwana futhi ucacise inani lenkundlaUbude obungahambelani nosayizi wedatha enohlobo lwe-INTEGER, okuzoholela emsileni wedatha. kusuka endaweni ebhalwa ngale kwebhafa eyabiwe. Njengomphumela wokuchichima kwebhafa okulawulwayo, ungakwazi ukuchaza kabusha isikhombisi sokubuyisela kusukela kumsebenzi futhi, usebenzisa amasu okuhlela agxile ekubuyiseleni (i-ROP - Uhlelo Lwe-Return-Oriented Programming), uzuze ukusetshenziswa kwekhodi yakho.
• I-CVE-2021-40439 iwukuhlasela kwe-DoS “kweBhiliyoni elihlekayo” (ibhomu le-XML), okuholela ekukhathaleni kwezinsiza zesistimu ezitholakalayo lapho kucutshungulwa idokhumenti eklanywe ngokukhethekile.
• I-CVE-2021-28129 - Okuqukethwe kwephakheji ye-DEB kufakwe ohlelweni njengomsebenzisi ongeyona impande.

Izinguquko ezingezona ezokuvikela:

• Usayizi wefonti emibhalweni yesigaba sosizo ukhulisiwe.
• Into yengezwe kumenyu ethi Faka ukuze kulawulwe imiphumela yamafonti e-Fontwork.
• Kwengezwe isithonjana esingekho kumenyu yefayela yomsebenzi wokuthekelisa we-PDF.
• Inkinga ngokulahleka kwemidwebo uma ulondolozwa ngefomethi ye-ODS isixazululiwe.
• Inkinga enomsebenzi othile owusizo ovinjwe ibhokisi lokuqinisekisa umsebenzi owengezwe ekukhishweni kwangaphambilini isixazululiwe (isibonelo, ibhokisi libonisiwe lapho kukhulunywa ngesigaba kudokhumenti efanayo).

Source: opennet.ru