{"id":123623,"date":"2025-04-21T15:05:12","date_gmt":"2025-04-21T13:05:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome"},"modified":"2025-04-21T15:05:12","modified_gmt":"2025-04-21T13:05:12","slug":"14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","title":{"rendered":"14 haavatavust libsoup'i raamatukogus, mida kasutatakse GNOME'is.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GNOME'i projekti poolt arendatud libsoup teegis avastati 14 haavatavust. Libsoup pakub HTTP kliendi ja serveri \u0440\u0435\u0430\u043b\u0438\u0437\u0430atsiooni, mis kasutab GObject'e GNOME'i rakendustega integreerimiseks. Teeki kasutatakse GNOME Shell'is, Epiphany (GNOME Web) brauseris, Shotwell'i pildivaatajas, GStreamer'i pluginas souphttpsrc ja rakendustes, mis kasutavad libwebkit2gtk-d. Varem kasutati libsoup'i NetworkManager'is, kuid alates versioonist 1.8 on see \u00fcle viidud libcurl'ile. <\/p>\n

\u00dcks haavatavustest (CVE-2025-32911) p\u00f5hjustab topeltm\u00e4lu vabastamise (double-free) funktsioonis soup_message_headers_get_content_disposition() ja seda v\u00f5ib teoreetiliselt kasutada kaugkoodide t\u00e4itmiseks, kui t\u00f6\u00f6deldakse spetsiaalselt vormindatud p\u00e4ringuid HTTP-kliendilt, serverile<\/a>, mis kasutab libsoup'i. Probleem on lahendatud libsoup versioonis 3.6.3. <\/p>\n

12 probleemi p\u00f5hjustavad m\u00e4lupuhvri \u00fclevoolu lugemisoperatsioonide v\u00f5i NULL-poliitiku dereferentseerimise k\u00e4igus, mis t\u00e4hendab teenuse katkestamist (r\u00fcndaja v\u00f5ib p\u00f5hjustada rakenduse, mis kasutab libsoup, kokkuvarisemise). \u00dcks probleem (CVE-2025-32907) on p\u00f5hjustatud vahemiku p\u00e4ise vale t\u00f6\u00f6tlemise t\u00f5ttu ja v\u00f5imaldab kliendil algatada liigset m\u00e4lu tarbimist. serveril<\/a>.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c GNOME, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. Libsoup \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 GObjects \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 GNOME. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 GNOME Shell, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Epiphany (GNOME Web), \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0449\u0438\u043a\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Shotwell, \u0432 GStreamer-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 souphttpsrc \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 libwebkit2gtk. \u0420\u0430\u043d\u0435\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libsoup \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 NetworkManager, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 1.8 \u0431\u044b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123623","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4714 haavatavust libsoup teegis, mida kasutatakse GNOME'is | ProHoster","description":"GNOME projekti arendatud libsoup teegis on tuvastatud 14 haavatavust. Libsoup pakub HTTP kliendi ja serveri teostusi, mis kasutavad GObject'e integreerimiseks GNOME rakendustega. Teeki kasutatakse GNOME Shell'is, brauseris Epiphany (GNOME Web), pildivaatajas Shotwell, GStreamer'i plugina souphttpsrc sees ja rakendustes, mis kasutavad libwebkit2gtk. Varasemalt elas libsoup NetworkManager'is, mis alates versioonist 1.8 puudub.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4714 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 GNOME | ProHoster","og:description":"\u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libsoup, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c GNOME, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. Libsoup \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 HTTP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 GObjects \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 GNOME. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 GNOME Shell, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Epiphany (GNOME Web), \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0449\u0438\u043a\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Shotwell, \u0432 GStreamer-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 souphttpsrc \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 libwebkit2gtk. \u0420\u0430\u043d\u0435\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libsoup \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 NetworkManager, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 1.8 \u0431\u044b\u043b","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/14-uyazvimostej-v-biblioteke-libsoup-ispolzuemoj-v-gnome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-21T13:05:12+00:00","article:modified_time":"2025-04-21T13:05:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123623","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:08:59","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:22:22","updated":"2026-02-09 22:08:59"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123623","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=123623"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123623\/revisions"}],"predecessor-version":[{"id":160213,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/123623\/revisions\/160213"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=123623"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=123623"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=123623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}