Uma exhashazwa, lawa maphutha angavumela abahlaseli ukuthi bathole ukufinyelela okungagunyaziwe kulwazi olubucayi noma ngokuvamile babangele izinkinga.
Ulwazi olukhishwe mayelana kutholwe ubungozi obubili ku-LibreOffice office suite, enye yazo ibhekwa njengeyingozi kakhulu, ngoba ivumela ukwenziwa kwekhodi lapho uvula idokhumenti eklanywe ngokukhethekile.
Ukuba sengozini kokuqala (sekufakwe kukhathalogi ngaphansi I-CVE-2023-0950) kuyaphawuleka njengoba kungase kusetshenziswe kabi ngokuvumela ikhodi ukuthi isetshenziswe ohlelweni ngokuvula isipredishithi esihlanganisa amafomula alungiswe ngokukhethekile.
Kushiwo lokho kuzinguqulo ezithintekile ze-LibreOffice, amafomula athile esipredishithi ayilungile, nge-AGGREGATE ingadalwa ngamapharamitha ambalwa kunokulindelekile. Inkinga ibangelwa ukugeleza okungaphansi kwenkomba yamalungu afanayo kukhodi yokuhlaziya yefomula (ScInterpreter) esetshenziswa ekucubunguleni isipredishithi.
Imojula yesipredishithi ye-LibreOffice isekela amafomula amaningi athatha amapharamitha amaningi. Amafomula atolikwa 'yiScInterpreter' ekhipha izinhlaka ezidingekayo zefomula enikeziwe esitakini.
Ukuba sengozini kwesibili futhi okuyingozi kakhulu ukuthi (I-CVE-2023-2255) futhi lokhu kuba okubaluleke kakhulu, ngoba ivumela umhlaseli ukuthi alungise idokhumenti yakhelwe ngokukhethekile ukuthi, lapho ivulwa ngaphandle kwesaziso noma isexwayiso, izolayisha izixhumanisi zangaphandle, ezingahambisani nokuziphatha okumenyezelwe kwe-LibreOffice, okusho isexwayiso lapho kulayishwa okuqukethwe okuhlobene.
Ezinguqulweni ezithintekile ze-LibreOffice, lawa ma-iframe athola futhi abonise idokhumenti yawo exhunyiwe ngaphandle kokwaziswa lapho kulayishwa idokhumenti yokusingatha. Lokhu bekungahambisani nokuziphatha kokunye okuqukethwe kwedokhumenti exhunyiwe, njengezinto ze-OLE, izigaba ezixhunyiwe zoMlobi, noma amafomula e-CALC WEBSERVICE axwayisa umsebenzisi ukuthi kukhona amadokhumenti axhunyiwe futhi abuze ukuthi kufanele avunyelwe yini ukuba abuyekeze.
Inkinga ibangelwa iphutha kukhodi yesicelo semvume lapho kusetshenziswa indlela "Yozimele Ezintantayo", efana ne-iframe ku-HTML futhi ivumela okuqukethwe okuvela kumafayela angaphandle ukuthi kufakwe ngamandla kudokhumenti.
Ekugcineni kushiwo ukuthi ukuba sengozini kokuqala kwalungiswa ngaphandle kokumenyezelwa okuningi kuzinguqulo zika-March 7.4.6 no-7.5.1 lapho ukubalwa kwepharamitha sekuqinisekisiwe futhi ukuba sengozini kwesibili kwalungiswa kuzibuyekezo zikaMeyi ze-LibreOffice 7.4.7 no-7.5.3. XNUMX lapho isiphathi sesixhumanisi sokubuyekeza esikhona sinwetshwe ukuze silawule ukubuyekezwa okuqukethwe kwe-IFrames.
Ungayifaka kanjani i-LibreOffice 7.5.3?
Kulabo abanesifiso sokwazi ukuthuthukisa i-office suite yabo, kufanele bazi ukuthi kungenzeka ukuthi sebevele bakunguqulo yamanje kakhulu, okuyinguqulo 7.5.3.
Uma ungakabi kule nguqulo, ungenza imiyalo yokuvuselela yokusabalalisa kwakho noma, uma kunjalo, ungenza inqubo mathupha. ngoba kuqala kufanele siqale sikhiphe inguqulo yangaphambilini, lokhu kwenzelwa ukugwema izinkinga kamuva.
Ukwenza lokhu kufanele sivule itheminali futhi senze okulandelayo (isibonelo ku-Ubuntu nokuphuma kokunye):
sudo apt-get remove --purge libreoffice*
sudo apt-get clean
sudo apt-get autoremove
Manje sizoqhubeka iya kuwebhusayithi esemthethweni yephrojekthi lapho esigabeni sakho sokulanda singakwazi thola iphakethe lesikweletu ukuze sikwazi ukuyifaka ohlelweni lwethu.
Kwenziwe ukulanda sizovula okuqukethwe kwephakeji elisanda kuthengwa nge:
tar -xzvf LibreOffice_7.5.3_Linux*.tar.gz
Sifaka umkhombandlela owenziwe ngemuva kokuvula uziphu, kimi yi-64-bit:
cd LibreOffice_7.5.3_Linux_x86-64_deb
Ngemuva kwalokho siya kufolda lapho kukhona amafayela we-LibreOffice deb:
cd DEBS
Futhi ekugcineni sifaka nge:
sudo dpkg -i *.deb
Ungayifaka kanjani i-LibreOffice 7.5.3 ku-Fedora, i-openSUSE kanye nokuphuma kwayo?
Si usebenzisa uhlelo olunokusekelwa ukufaka amaphakheji we-rpm, Ungafaka lesi sibuyekezo esisha ngokuthola iphakethe le-rpm ekhasini lokulanda le-LibreOffice.
Kutholakale iphakheji esizivula nayo nge-zip:
tar -xzvf LibreOffice_7.5.3_Linux_x86-64_rpm.tar.gz
Futhi sifaka amaphakheji ifolda eliqukethe:
sudo rpm -Uvh *.rpm
Ungayifaka kanjani i-LibreOffice 7.5.3 ku-Arch Linux, Manjaro kanye ne-derivatives?
Endabeni ye-Arch nezinhlelo zayo ezithathwe Singafaka le nguqulo ye-LibreOffice, sivula nje ukuphela bese sithayipha:
sudo pacman -Sy libreoffice-fresh