Ubuntu Update for libcairo regression USN-550-3

Ubuntu Update for Linux kernel vulnerabilities USN-550-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN5503.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libcairo regression USN-550-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

USN-550-3: Cairo regression

USN-550-1 fixed vulnerabilities in Cairo. A bug in font glyph rendering was uncovered as a result of the new memory allocation routines. In certain situations, fonts containing characters with no width or height would not render any more. This update fixes the problem. We apologize for the...

NVidia Linux二进制图形驱动缓冲区溢出漏洞

NVidia是世界领先的图形处理芯片和显卡制造商。 NVIDIA的二进制blob驱动在加速渲染glyphs（文本字符数据）时存在缓冲区溢出，允许攻击者向内存中的任意位置写入数据。 XRender扩展提供一个名为XRenderCompositeString8的客户端函数要求X服务器在屏幕上渲染glyphs。服务程序的ProcRenderCompositeGlpyhs函数会处理这个请求，从渲染请求中提取出glyphs，创建一个glyph列表，然后通过注册的回调函数调用图形驱动。...