{"id":120071,"date":"2024-10-07T13:09:21","date_gmt":"2024-10-07T11:09:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome"},"modified":"2024-10-07T13:09:21","modified_gmt":"2024-10-07T11:09:21","slug":"uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-v-biblioteke-libgsf-zatragivayushhaya-gnome","title":{"rendered":"Vulnerability in the libgsf library affecting GNOME","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability (CVE-2024-42415) has been discovered in the libgsf library developed by the GNOME project, which could lead to code execution when processing a specially crafted file. The vulnerability is caused by an integer overflow that results in data being written beyond the allocated buffer when handling the sector allocation table while parsing parameters from the headers of files in CDF (Compound Document Format). <\/p>\n
The libgsf library provides functions for parsing various structured file formats, including archives and document formats. In addition to applications such as AbiWord, Gnumeric, GNOME Commander, and Nemo, the library is used by the GNOME project in the tracker-miners search engine and is a dependency in the tracker-extract package, which automatically gathers metadata about new files. <\/p>\n
The danger lies in the fact that GNOME services using libgsf automatically index and parse all files in the home directory without any action from the user. Thus, for an attack to occur, a specially crafted file must appear in the user's directory (for example, in some cases, simply clicking a link in the browser is enough to place the file in the ~\/Downloads folder), and the vulnerability will be exploited during its automatic indexing. <\/p>\n
Vulnerability fixed in the libgsf library update 1.14.53. You can track the emergence of updates in the distributions on the following pages: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. In most distributions with GNOME, the tracker-miners component is enabled by default and loaded as a hard dependency for the Nautilus file manager (GNOME Files). To disable tracker-miners for the current user, you can use the following commands: systemctl --user mask tracker-store.service tracker-miner-fs.service tracker-miner-rss.service tracker-extract.service tracker-miner-apps.service tracker-writeback.service tracker reset --hard \n \u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"