{"id":7949,"date":"2025-01-03T16:25:22","date_gmt":"2025-01-03T08:25:22","guid":{"rendered":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=7949"},"modified":"2025-01-08T16:28:33","modified_gmt":"2025-01-08T08:28:33","slug":"xml%e6%aa%94%e6%a1%88%e8%a7%a3%e6%9e%90%e7%a8%8b%e5%bc%8f%e5%ba%ablibxml2%e5%ad%98%e5%9c%a8%e9%87%8d%e5%a4%a7%e6%bc%8f%e6%b4%9e%ef%bc%8c%e6%81%90%e8%a2%ab%e7%94%a8%e6%96%bcxml%e5%a4%96%e9%83%a8","status":"publish","type":"post","link":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=7949","title":{"rendered":"XML\u6a94\u6848\u89e3\u6790\u7a0b\u5f0f\u5eablibxml2\u5b58\u5728\u91cd\u5927\u6f0f\u6d1e\uff0c\u6050\u88ab\u7528\u65bcXML\u5916\u90e8\u5be6\u9ad4\u653b\u64ca"},"content":{"rendered":"\n

2025-01-03 | \u5468\u5cfb\u4f51<\/p>\n\n\n\n

\u7f8e\u570b\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab\uff08NVD\uff09\u8fd1\u671f\u516c\u5e03GNOME\u958b\u767c\u5718\u968a\u65bc7\u6708\u4fee\u88dc\u7684\u4e00\u9805\u6f0f\u6d1eCVE-2024-40896\uff0c\u6b64\u6f0f\u6d1e\u5b58\u5728\u65bcXML\u6a94\u6848\u89e3\u6790\u7a0b\u5f0f\u5eablibxml2\uff0c\u901a\u5831\u6b64\u4e8b\u7684\u958b\u767c\u4eba\u54e1\u6307\u51fa\uff0c\u8a72\u6f0f\u6d1e\u6709\u53ef\u80fd\u66dd\u9732\u96fb\u8166\u4f7f\u7528\u8005\u7684\u5e33\u5bc6\u8cc7\u6599\uff0c\u76f8\u7576\u56b4\u91cd\u3002<\/p>\n\n\n\n

Linux\u684c\u9762\u74b0\u5883GNOME\u958b\u767c\u5718\u968a\u53bb\u5e747\u6708\u4fee\u88dc\u89e3\u6790XML\u6a94\u6848\u7684\u7a0b\u5f0f\u5eablibxml2\u6f0f\u6d1eCVE-2024-40896\uff0c\u9019\u9805\u6f0f\u6d1e\u5f71\u97ff2.11\u30012.12\u30012.13\u7248\uff0c\u51fa\u73fe\u5728\u8a72\u7a0b\u5f0f\u5eab\u7684SAX\u8655\u7406\u5668\uff0c\u6709\u53ef\u80fd\u6703\u610f\u5916\u66dd\u9732\u5916\u90e8\u5be6\u9ad4\uff0c\u800c\u80fd\u8b93\u653b\u64ca\u8005\u7528\u65bc\u767c\u52d5XML\u5916\u90e8\u5be6\u9ad4\uff08XXE\uff09\u653b\u64ca\uff0cCVSS\u98a8\u96aa\u9054\u52309.1\u5206\uff08\u6eff\u520610\u5206\uff09\uff0cGNOME\u7576\u6642\u767c\u5e032.11.9\u30012.12.9\u30012.13.3\u7248\u4e88\u4ee5\u4fee\u88dc\uff0c\u7f8e\u570b\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab\uff08NVD\uff09\u65bc12\u670823\u65e5\u5c07\u5176\u5217\u5165\u3002<\/p>\n\n\n\n

\u4ee5C\u8a9e\u8a00\u6253\u9020\u800c\u6210\u7684\u7a0b\u5f0f\u5eablibxml2\uff0c\u4e3b\u8981\u529f\u80fd\u662f\u89e3\u6790XML\u6a94\u6848\uff0c\u8a72\u7a0b\u5f0f\u5eab\u80fd\u4ee5\u591a\u7a2e\u8a9e\u8a00\u547c\u53eb\uff0c\u4f8b\u5982\uff1aC++\u3001Python\u3001Ruby\uff0c\u4f7f\u5f97\u9019\u9805\u7a0b\u5f0f\u5eab\u80fd\u904b\u7528\u5728\u591a\u7a2e\u958b\u767c\u74b0\u5883\u3002libxml2\u6700\u521d\u662f\u7531GNOME\u958b\u767c\u7684\u5c08\u6848\uff0c\u4e26\u7528\u65bc\u5404\u7a2e\u4f5c\u696d\u7cfb\u7d71\uff0c\u4e00\u65e6\u51fa\u73fe\u56b4\u91cd\u6f0f\u6d1e\u3001\u53c8\u672a\u53ca\u65e9\u4fee\u88dc\uff0c\u5f71\u97ff\u5c07\u53ef\u80fd\u76f8\u7576\u5ee3\u6cdb\u3002<\/p>\n\n\n\n

\u9019\u9805\u6f0f\u6d1e\u6700\u521d\u662f\u7531\u4e00\u540d\u5f9e\u4e8b\u8fa6\u516c\u5ba4\u8edf\u9ad4LibreOffice\u5c08\u6848\u7684\u958b\u767c\u4eba\u54e1\u901a\u5831\uff0c\u4ed6\u8868\u793a\u5728\u5c0e\u51652.13\u7248libxml2\u7684\u6642\u5019\uff0c\u610f\u5916\u767c\u73fe\u7576\u4e2d\u6709\u90e8\u5206\u5df2\u77e5\u6f0f\u6d1e\u518d\u5ea6\u51fa\u73fe\uff0c\u5176\u4e2d\u4e00\u500b\u662fCVE-2012-0037\uff08CVSS\u98a8\u96aa\u70ba6.5\u5206\uff09\u3002<\/p>\n\n\n\n

LibreOffice\u5718\u968a\u539f\u672c\u5df2\u5c0dCVE-2012-0037\u4f5c\u51fa\u8655\u7406\uff0c\u4f46\u5728\u5347\u7d1a\u65b0\u7248libxml2\u4e4b\u5f8c\uff0c\u76f8\u95dc\u7a0b\u5f0f\u78bc\u7684\u4f5c\u7528\u96a8\u4e4b\u5931\u6548\uff0c\u800c\u4e14\u6703\u986f\u73fe\/etc\/passwd\u7684\u5167\u5bb9\uff0c\u56e0\u800c\u767c\u73fe\u65b0\u6f0f\u6d1e\u3002<\/p>\n\n\n\n

\u9019\u4f4d\u767c\u73fe\u4e0a\u8ff0\u554f\u984c\u7684\u958b\u767c\u8005\u5c07\u60c5\u6cc1\u901a\u5831GNOME\uff0c\u4e26\u88fd\u4f5c\u6982\u5ff5\u6027\u9a57\u8b49\u6587\u4ef6\u9032\u4e00\u6b65\u8aaa\u660e\u7d30\u7bc0\uff0cGNOME\u5f8c\u7e8c\u4e5f\u78ba\u8a8d\u9019\u9805\u6f0f\u6d1e\u5b58\u5728\uff0c\u4e26\u5c07\u5176\u767b\u8a18\u70baCVE-2024-40896\u3002<\/p>\n\n\n\n

\u8cc7\u6599\u4f86\u6e90: https:\/\/www.ithome.com.tw\/news\/166810<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

2025-01-03 | \u5468\u5cfb\u4f51 \u7f8e\u570b\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab\uff08NVD\uff09\u8fd1\u671f\u516c\u5e03GNOME\u958b\u767c\u5718\u968a\u65bc7\u6708\u4fee\u88dc\u7684\u4e00\u9805\u6f0f\u6d1eCVE-2024-40896\uff0c\u6b64\u6f0f\u6d1e\u5b58\u5728\u65bcXML\u6a94\u6848\u89e3\u6790\u7a0b\u5f0f\u5eablibxm…<\/p>\n","protected":false},"author":4,"featured_media":7950,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[352],"tags":[204],"class_list":["post-7949","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","tag-204"],"gutentor_comment":0,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/aict.nkust.edu.tw\/digitrans\/wp-content\/uploads\/2025\/01\/%E8%9E%A2%E5%B9%95%E6%93%B7%E5%8F%96%E7%95%AB%E9%9D%A2-2025-01-08-162749.png?fit=956%2C399&ssl=1","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/7949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7949"}],"version-history":[{"count":1,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/7949\/revisions"}],"predecessor-version":[{"id":7951,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/7949\/revisions\/7951"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/media\/7950"}],"wp:attachment":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}