You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa qt5-qtwebengine

Sigurnosni nedostaci programskog paketa qt5-qtwebengine

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2018-c0d3db441f
2018-02-27 16:51:55.487872
——————————————————————————–

Name : qt5-qtwebengine
Product : Fedora 26
Version : 5.10.1
Release : 1.fc26
URL : http://www.qt.io
Summary : Qt5 – QtWebEngine components
Description :
Qt5 – QtWebEngine components.

——————————————————————————–
Update Information:

This update updates QtWebEngine to the 5.10.1 bugfix and security release.
QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine
component is included in this update. This update includes: * Security fixes
from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407,
CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416,
CVE-2017-15418, CVE-2017-15419, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424,
CVE-2017-15425, CVE-2017-15426, CVE-2018-6031, CVE-2018-6033, CVE-2018-6034,
CVE-2018-6036, CVE-2018-6037, CVE-2018-6038, CVE-2018-6040, CVE-2018-6041,
CVE-2018-6042, CVE-2018-6047, CVE-2018-6048, CVE-2018-6050, CVE-2018-6051,
CVE-2018-6052, CVE-2018-6053 and CVE-2018-6054. * Mitigations for SPECTRE:
disabled shared-buffers, added cryptographic noise to precision timers *
[QTBUG-47206] Fixed incorrect layouting due to bug in HTML5 viewport support. *
[QTBUG-47945, QTBUG-65647] Fixed random crashes on exit * [QTBUG-57206] Fixed
regression in viewport handling in embedded mode * [QTBUG-58400] Improved memory
usage when printing * [QTBUG-63867] Fixed elements when compiled
without OpenGL * [QTBUG-63266, QTBUG-64436] Fixed that pointerType of Pointer
Events was empty * [QTBUG-63606] Improved runtime disabling and clearing of HTTP
cache * [QTBUG-64436] QtWebEngineWidgets: Fixed crash when exiting fullscreen
mode using the context menu. * [QTBUG-64560] Fixed rendering glitches after
renderProcessTerminated signal was emitted. * [QTBUG-64812] Fixed message bubble
position in Hi-DPI mode * [QTBUG-64869, QTBUG-65004] Added testing for 32-bit
host compiler when crossbuilding to 32-bit platforms * [QTBUG-64933]
QtWebEngineWidgets: Fixed tooltips that did still show after mouse was moved
away. * [QTBUG-65239] Fixed hanging of process if application is closed too fast
after startup. * [QTBUG-65715] Fixed double margins when printing
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade qt5-qtwebengine’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2018-e08d828ed9
2018-02-25 21:13:42.652107
——————————————————————————–

Name : qt5-qtwebengine
Product : Fedora 27
Version : 5.10.1
Release : 1.fc27
URL : http://www.qt.io
Summary : Qt5 – QtWebEngine components
Description :
Qt5 – QtWebEngine components.

——————————————————————————–
Update Information:

This update updates QtWebEngine to the 5.10.1 bugfix and security release.
QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine
component is included in this update. This update includes: * Security fixes
from Chromium up to version 64.0.3282.140. Including: CVE-2017-15407,
CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15415, CVE-2017-15416,
CVE-2017-15418, CVE-2017-15419, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424,
CVE-2017-15425, CVE-2017-15426, CVE-2018-6031, CVE-2018-6033, CVE-2018-6034,
CVE-2018-6036, CVE-2018-6037, CVE-2018-6038, CVE-2018-6040, CVE-2018-6041,
CVE-2018-6042, CVE-2018-6047, CVE-2018-6048, CVE-2018-6050, CVE-2018-6051,
CVE-2018-6052, CVE-2018-6053 and CVE-2018-6054. * Mitigations for SPECTRE:
disabled shared-buffers, added cryptographic noise to precision timers *
[QTBUG-47206] Fixed incorrect layouting due to bug in HTML5 viewport support. *
[QTBUG-47945, QTBUG-65647] Fixed random crashes on exit * [QTBUG-57206] Fixed
regression in viewport handling in embedded mode * [QTBUG-58400] Improved memory
usage when printing * [QTBUG-63867] Fixed <canvas> elements when compiled
without OpenGL * [QTBUG-63266, QTBUG-64436] Fixed that pointerType of Pointer
Events was empty * [QTBUG-63606] Improved runtime disabling and clearing of HTTP
cache * [QTBUG-64436] QtWebEngineWidgets: Fixed crash when exiting fullscreen
mode using the context menu. * [QTBUG-64560] Fixed rendering glitches after
renderProcessTerminated signal was emitted. * [QTBUG-64812] Fixed message bubble
position in Hi-DPI mode * [QTBUG-64869, QTBUG-65004] Added testing for 32-bit
host compiler when crossbuilding to 32-bit platforms * [QTBUG-64933]
QtWebEngineWidgets: Fixed tooltips that did still show after mouse was moved
away. * [QTBUG-65239] Fixed hanging of process if application is closed too fast
after startup. * [QTBUG-65715] Fixed double margins when printing
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade qt5-qtwebengine’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorDanijel Kozinovic
Cert idNCERT-REF-2018-02-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa suricata

Otkriven je sigurnosni nedostatak u programskom paketu suricata za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje zaobilaženje sigurnosnih ograničenja....

Close