{"id":123623,"date":"2025-04-21T15:05:12","date_gmt":"2025-04-21T13:05:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome"},"modified":"2025-04-21T15:05:12","modified_gmt":"2025-04-21T13:05:12","slug":"14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","title":{"rendered":"GNOME-da istifad\u0259 olunan libsoup kitabxanas\u0131nda 14 z\u0259iflik","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GNOME layih\u0259si t\u0259r\u0259find\u0259n inki\u015faf etdiril\u0259n libsoup kitabxanas\u0131nda 14 z\u0259iflik a\u015fkar edilib. Libsoup, GNOME t\u0259tbiql\u0259ri il\u0259 inteqrasiya \u00fc\u00e7\u00fcn GObjects istifad\u0259 ed\u0259n HTTP m\u00fc\u015ft\u0259ri v\u0259 serverinin icra birl\u0259\u015fm\u0259l\u0259rini t\u0259qdim edir. Bu kitabxana GNOME Shell, Epiphany (GNOME Web) brauzeri, Shotwell \u015f\u0259kil g\u00f6r\u00fcnt\u00fcl\u0259yicisi, GStreamer plaginl\u0259rind\u0259n biri olan souphttpsrc v\u0259 libwebkit2gtk istifad\u0259 ed\u0259n t\u0259tbiql\u0259rd\u0259 t\u0259tbiq olunur. \u018fvv\u0259ll\u0259r libsoup kitabxanas\u0131 NetworkManager-da istifad\u0259 olunurdu, lakin 1.8 versiyas\u0131nda libcurl-a ke\u00e7id olunmu\u015fdur. <\/p>\n

Z\u0259iflikl\u0259rd\u0259n biri (CVE-2025-32911) soup_message_headers_get_content_disposition() funksiyas\u0131nda ikili s\u0259rb\u0259st buraxma (double-free) yarad\u0131r v\u0259 n\u0259z\u0259ri c\u0259h\u0259td\u0259n m\u00fc\u0259yy\u0259nl\u0259\u015fdirilmi\u015f HTTP m\u00fc\u015ft\u0259risinin sor\u011fular\u0131n\u0131 emal ed\u0259rk\u0259n uzaqdan kodun icras\u0131n\u0131 h\u0259yata ke\u00e7irm\u0259k \u00fc\u00e7\u00fcn istifad\u0259y\u0259 veril\u0259 bil\u0259r. sunucunuz<\/a>, libsoup istifad\u0259 ed\u0259n. Problemin h\u0259lli libsoup-un 3.6.3 versiyas\u0131nda h\u0259yata ke\u00e7irilmi\u015fdir. <\/p>\n

12 problem, oxuma \u0259m\u0259liyyatlar\u0131 zaman\u0131 yast\u0131\u011f\u0131n doldurulmas\u0131 (buffer overflow) il\u0259 n\u0259tic\u0259l\u0259nir ya da NULL g\u00f6st\u0259ricisinin dekapsulyasiyas\u0131 ba\u015f verir, y\u0259ni xidm\u0259tin dayand\u0131r\u0131lmas\u0131 il\u0259 n\u0259tic\u0259l\u0259nir (h\u00fccum ed\u0259n, libsoup istifad\u0259 ed\u0259n t\u0259tbiqin \u00e7\u00f6k\u00fc\u015f\u00fcn\u0259 s\u0259b\u0259b ola bil\u0259r). Bir problem (CVE-2025-32907), Range ba\u015fl\u0131\u011f\u0131n\u0131n d\u00fczg\u00fcn emal edilm\u0259m\u0259si s\u0259b\u0259bind\u0259n ba\u015f verir v\u0259 m\u00fc\u015ft\u0259rinin sunucusu<\/a>.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c GNOME, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. Libsoup \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 GObjects \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 GNOME. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 GNOME Shell, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Epiphany (GNOME Web), \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0449\u0438\u043a\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Shotwell, \u0432 GStreamer-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 souphttpsrc \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 libwebkit2gtk. \u0420\u0430\u043d\u0435\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libsoup \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 NetworkManager, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 1.8 \u0431\u044b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123623","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GNOME-da istifad\u0259 olunan libsoup kitabxanas\u0131nda 14 z\u0259iflik | ProHoster","description":"GNOME layih\u0259si t\u0259r\u0259find\u0259n inki\u015faf etdiril\u0259n libsoup kitabxanas\u0131nda 14 z\u0259iflik a\u015fkar edilib. Libsoup, GNOME t\u0259tbiql\u0259ri il\u0259 inteqrasiya \u00fc\u00e7\u00fcn GObjects istifad\u0259 ed\u0259n HTTP m\u00fc\u015ft\u0259ri v\u0259 serverinin icra birl\u0259\u015fm\u0259l\u0259rini t\u0259qdim edir.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4714 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 GNOME | ProHoster","og:description":"\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c GNOME, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. Libsoup \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 GObjects \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 GNOME.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-21T13:05:12+00:00","article:modified_time":"2025-04-21T13:05:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123623","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:08:59","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:22:22","updated":"2026-02-09 22:08:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/123623","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=123623"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/123623\/revisions"}],"predecessor-version":[{"id":160213,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/123623\/revisions\/160213"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=123623"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=123623"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=123623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}