Kungekudala kuye kwavezwa ibug Obu bungozi babekhathalogwe kwi-CVE-2019-9848. Le mpazamo ifunyenwe se inokusetyenziselwa ukwenza ikhowudi engalawulekiyo xa kuvulwa amaxwebhu alungiselelwe kwangaphambili ngumntu okhohlakeleyo kwaye emva koko azisasaze alinde ixhoba ukuba liphumeze la maxwebhu.
Ukuba sesichengeni Kubangelwa yinto yokuba icandelo leLibreLogo, dInjongo yeenkqubo zokufundisa kunye nokufaka imizobo ye vector, iguqulela ukusebenza kwayo kwikhowudi yePython. Ngokukwazi ukwenza imiyalelo yeLibreLogo, Umhlaseli angenza nayiphi na ikhowudi yePython kwimeko yeseshoni yangoku yomsebenzisi, usebenzisa umyalelo "wokugijima" obonelelwe kwiLibreLogo. Ukusuka ePython, usebenzisa system (), emva koko, ungatsalela umnxeba imiyalelo yenkqubo engenakuphikiswa.
Njengoko kuchaziwe ngumntu oxele le bug:
IiMacros ezithunyelwa ngeLibreOffice ziqhutywa ngaphandle kokuyalela umsebenzisi, nkqu nakwezona ndawo ziphakamileyo zokhuseleko. Ke ukuba bekukho inkqubo ye-LibreOffice macro enempazamo evumela ikhowudi ukuba isebenze, umsebenzisi ngekhe afumane nesilumkiso kwaye ikhowudi iya kusebenza kwangoko.
Malunga nesigwebo
I-LibreLogo yinto yokuzikhethela, kodwa kwi-FreeOffice macros inikezelwa ngokungagqibekanga, ukuvumela ukubiza uLibreLogo kwaye awufuni uqinisekiso lomsebenzi kwaye ungabonisi isilumkiso, nokuba imeko yokhuseleko ephezulu yee-macros yenziwe (kukhethwa inqanaba "Phezulu kakhulu").
Uhlaselo, unokuncamathisela i-macro enjalo kumphathi wesiganeko ovuthayo, umzekelo, xa uhambisa imouse ngaphezulu kwendawo ethile okanye xa uvula igalelo kugxilwe kuxwebhu (kumcimbi wokuGxila).
Ingxaki enkulu apha kukuba ikhowudi ayiguquli kakuhle kwaye inika kuphela ikhowudi ye-python, kuba ikhowudi yeskripthi ihlala ikhokelela kwikhowudi efanayo emva kokuguqulelwa.
Ngenxa yoko, xa uvula uxwebhu olulungiselelwe ngumhlaseli, unokufezekisa ukwenziwa okufihliweyo kwekhowudi yePython, engabonakaliyo kumsebenzisi.
Umzekelo, kumzekelo wokuxhaphaza obonisiweyo, xa uvula uxwebhu ngaphandle kwesixwayiso, inkqubo yokubala iyaqala.
Kwaye oko ayisiyo bug yokuqala echaziweyo apho kwenzeka khona iziganeko kwiofisi yeseti ukusukela ngaphakathi Kwiinyanga ezidlulileyo elinye ityala lavezwa apho kwiinguqulelo 6.1.0-6.1.3.1 kuyaboniswa ukuba ikhowudi yenaliti yile kunokwenzeka kwiinguqulelo zeLinux kunye neeWindows xa umsebenzisi ehambisa imouse ngaphezulu kwe-URL enobungozi.
Ukusukela ngendlela efanayo xa ubungozi babuchaphazeleka, khange ivelise naluphi na uhlobo lwencoko yababini yesilumkiso. Ngokukhawuleza xa umsebenzisi ehambisa imouse ngaphezulu kwe-URL enobungozi, ikhowudi isebenza kwangoko.
Kwelinye icala, ukusetyenziswa kwePython ngaphakathi kwesuti kukwabonakalise iimeko zokuxhaphaza iibugs apho isuti iqhuba ikhowudi yokuchasana ngaphandle kwezithintelo okanye izilumkiso.
Ngale nto abantu baseLibreOffice banomsebenzi omkhulu wokujonga kwakhona eli candelo kwisuti kuba kukho iimeko ezininzi ezaziwayo ezisebenzisa eli thuba.
Ukuba semngciphekweni kwalungiswa ngaphandle kokunikwa ezinye iinkcukacha malunga nayo okanye malunga nayo malunga nayo kuhlaziyo 6.2.5 kwiLibreOffice, ikhutshwe nge-1 kaJulayi, kodwa kwavela ukuba ingxaki ayikasonjululwa ngokupheleleyo (kuphela umnxeba weLibreLogo ovela kwimacros wawuthintelwe) kwaye ezinye iivenkile zokwenza uhlaselo zihlala zingalunganga.
Kwakhona, ingxaki ayisombululeki kuhlobo 6.1.6 olucetyiswayo kubasebenzisi benkampani. Ukuphelisa ngokupheleleyo ukuba semngciphekweni kucwangcisiwe ekukhutshweni kweLibreOffice 6.3, elindeleke kwiveki ezayo.
Phambi kokuba kukhutshwe uhlaziyo olupheleleyo, abasebenzisi bayacetyiswa ukuba bakhubaze ngokucacileyo icandelo leLibreLogo, eligcina ngokwalo lifumaneka kwiiphakheji ezininzi. Umngcipheko wawulungiswe ngokuyinxalenye kwi-Debian, Fedora, SUSE / openSUSE, nakwi-Ubuntu.
Umthombo: https://insinuator.net/