[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20110205183517.39b7fb56.michael.s.gilbert@gmail.com>
Date: Sat, 5 Feb 2011 18:35:17 -0500
From: Michael Gilbert <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: Webkit Dupes
Hi,
The following issues are duplicate CVE assignments for webkit. Please
merge and reject these as appropriate.
CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662
http://code.google.com/p/chromium/issues/detail?id=48284
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793
CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667
http://code.google.com/p/chromium/issues/detail?id=43488
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793
CVE-2010-2302 and CVE-2010-1771:
webkit commit #59876
http://code.google.com/p/chromium/issues/detail?id=44740
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1771
CVE-2010-2301 and CVE-2010-1762:
webkit commit #59241 and #59242
http://code.google.com/p/chromium/issues/detail?id=43902
CVE-2010-2300 and CVE-2010-1759:
webkit commit #59109
http://code.google.com/p/chromium/issues/detail?id=43315
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1759
CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662 and #62482
http://code.google.com/p/chromium/issues/detail?id=48284
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793
CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667
http://code.google.com/p/chromium/issues/detail?id=43488
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793
CVE-2010-2899 and CVE-2010-1783:
webkit commit #62134
http://code.google.com/p/chromium/issues/detail?id=42736
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793
CVE-2010-1769 and CVE-2010-1774:
webkit commit #59495
both are apple announcements, and the only difference in the CVE
descriptions is "itunes" vs "safari"
CVE-2010-2441 and CVE-2010-1757
webkit commit #58829
i'm not 100% sure about this one since there is no useful info in
CVE-2010-1757. the descriptions sound very much the same issue, but
descriptions differ by "webkit on apple" vs "webkit"
CVE-2010-1665 and CVE-2010-1417:
webkit commit #58201
http://code.google.com/p/chromium/issues/detail?id=42294
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1417
CVE-2010-0651 and CVE-2010-0051:
webkit commit #52784
http://code.google.com/p/chromium/issues/detail?id=9877
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0051
Would it be possible to force Google and Apple to coordinate better to
avoid these dupes? This is creating unnecessary work and making it
appear that webkit has a lot more issues than it really does.
Thanks,
Mike
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
