Fedora 25 : qt5-qtwebengine (2017-580f91f6b0)

An update of QtWebEngine to the security and bugfix release 5.9.2, including : Chromium Snapshot : - Security fixes from Chromium up to version 61.0.3163.79 Including: CVE-2017-5092, CVE-2017-5093, CVE-2017-5095, CVE-2017-5097, CVE-2017-5099, CVE-2017-5102, CVE-2017-5103, CVE-2017-5107,...

Google NVIDIA Tegra X1 Direct rendering infrastructur boost vulnerability

Google Pixel is a smartphone device from Google, Inc.NVIDIA Tegra X1 is a processor chip from NVIDIA, Inc.Direct rendering infrastructur is an architecture for direct access to graphics hardware. The Direct rendering infrastructur vulnerability in the NVIDIA Tegra X1 on Google Pixel devices stems...

Fedora 26 : qt5-qtwebengine (2017-9a7e562fca)

An update of QtWebEngine to the security and bugfix release 5.9.2, including : Chromium Snapshot : - Security fixes from Chromium up to version 61.0.3163.79 Including: CVE-2017-5092, CVE-2017-5093, CVE-2017-5095, CVE-2017-5097, CVE-2017-5099, CVE-2017-5102, CVE-2017-5103, CVE-2017-5107,...

Debian DLA-1177-1 : poppler security update

It was discovered that poppler, a PDF rendering library, was affected by several denial of service application crash, NULL pointer dereferences and heap-based buffer over-read bugs : CVE-2017-14975 The FoFiType1C::convertToType0 function in FoFiType1C.cc has a NULL pointer dereference vulnerabili...

CVE-2017-0866

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel...

Privilege escalation

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel...

[SECURITY] Fedora 26 Update: poppler-0.52.0-10.fc26

poppler is a PDF rendering library...

[SECURITY] Fedora 27 Update: webkitgtk4-2.18.3-1.fc27

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

[SECURITY] Fedora 27 Update: poppler-0.57.0-6.fc27

poppler is a PDF rendering library...

October 10, 2017—KB4042895 (OS Build 10240.17643)

None None...

[SECURITY] Fedora 27 Update: poppler-0.57.0-5.fc27

poppler is a PDF rendering library...

[SECURITY] Fedora 27 Update: poppler-0.57.0-5.fc27

poppler is a PDF rendering library...

[SECURITY] Fedora 26 Update: poppler-0.52.0-9.fc26

poppler is a PDF rendering library...

USN-3467-1: poppler vulnerability

It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service...

Google Chrome Type Obfuscation Vulnerability (CNVD-2017-33592)

Google Chrome for Linux, Windows, Mac and Android is the United States Google Google company developed a Linux, Windows, Mac and Android platform based on the Web browser. PDFium is one of the open source PDF rendering engine. PDFium in Google Chrome on Mac, Windows, Linux and Android platforms...

CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...

CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...

CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...

UBUNTU-CVE-2017-5107

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...

Input validation

A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...