Get the latest tech news
GNOME's Help Browser Affected By A Serious Security Issue For Arbitrary File Reads
The GNOME Help Browser 'Yelp' for viewing HTML / man page / DocBook and other documentation formats from the GNOME desktop is subject to a yet-to-be-patched-upstream security vulnerability that is now public and can allow for arbitrary file reads and could be funneled through your web browser.
Michael Catanzaro of the GNOME Release Team and desktop engineer at Red Hat is raising the alarm bells today over this security issue. In a post earlier this month, "parrot409" who initially reported this issue demonstrated reading~/.ssh/id_rsa in the Chrome web browser. What's worse is there have been proposed patches for addressing this issue within the GNOME help viewer since last month but not yet reviewed and merged even with this vulnerability now public.
Or read this on Phoronix