{"id":120071,"date":"2024-10-07T13:09:21","date_gmt":"2024-10-07T11:09:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome"},"modified":"2024-10-07T13:09:21","modified_gmt":"2024-10-07T11:09:21","slug":"uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome","title":{"rendered":"Vulnerability in the libgsf library affecting GNOME","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability (CVE-2024-42415) has been identified in the libgsf library, developed by the GNOME project, which may allow for code execution when processing a specially crafted file. This vulnerability is due to an integer overflow that leads to writing data outside the allocated buffer while processing the sector allocation table during the parsing of parameters from the file header in the CDF (Compound Document Format) format. <\/p>\n
The libgsf library provides functions for parsing various structured file formats, including archives and document formats. In addition to applications like AbiWord, Gnumeric, GNOME Commander, and Nemo, the library is employed by the GNOME project in the tracker-miners search engine and is used as a dependency in the tracker-extract package, which automatically collects metadata about new files. <\/p>\n
The danger lies in the fact that the GNOME service using libgsf automatically indexes and parses all files in the home directory without any user action. Thus, for an attack to be successful, it is necessary to have a specially created file appear in the user's directory (for example, in some cases, simply clicking a link in the browser is enough to place a file in the ~\/Downloads directory) and the vulnerability will be exploited during its automatic indexing. <\/p>\n
The vulnerability has been fixed in the libgsf library update 1.14.53. You can track updates in the distributions on the following pages: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. In most GNOME distributions, the tracker-miners component is enabled by default and is loaded as a hard dependency for the Nautilus file manager (GNOME Files). To disable tracker-miners for the current user, you can use the following commands: systemctl --user mask tracker-store.service tracker-miner-fs.service tracker-miner-rss.service tracker-extract.service tracker-miner-apps.service tracker-writeback.service tracker reset --hard \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"