Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 5 Feb 2011 18:35:17 -0500
From: Michael Gilbert <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: Webkit Dupes

Hi,

The following issues are duplicate CVE assignments for webkit.  Please
merge and reject these as appropriate.

CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662
http://code.google.com/p/chromium/issues/detail?id=48284
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793

CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667
http://code.google.com/p/chromium/issues/detail?id=43488
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793

CVE-2010-2302 and CVE-2010-1771:
webkit commit #59876
http://code.google.com/p/chromium/issues/detail?id=44740
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1771

CVE-2010-2301 and CVE-2010-1762:
webkit commit #59241 and #59242
http://code.google.com/p/chromium/issues/detail?id=43902

CVE-2010-2300 and CVE-2010-1759:
webkit commit #59109
http://code.google.com/p/chromium/issues/detail?id=43315
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1759

CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662 and #62482
http://code.google.com/p/chromium/issues/detail?id=48284
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793

CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667
http://code.google.com/p/chromium/issues/detail?id=43488
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793

CVE-2010-2899 and CVE-2010-1783:
webkit commit #62134
http://code.google.com/p/chromium/issues/detail?id=42736
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1793

CVE-2010-1769 and CVE-2010-1774:
webkit commit #59495
both are apple announcements, and the only difference in the CVE
descriptions is "itunes" vs "safari"

CVE-2010-2441 and CVE-2010-1757
webkit commit #58829
i'm not 100% sure about this one since there is no useful info in
CVE-2010-1757. the descriptions sound very much the same issue, but
descriptions differ by "webkit on apple" vs "webkit"

CVE-2010-1665 and CVE-2010-1417:
webkit commit #58201
http://code.google.com/p/chromium/issues/detail?id=42294
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1417

CVE-2010-0651 and CVE-2010-0051:
webkit commit #52784
http://code.google.com/p/chromium/issues/detail?id=9877
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0051

Would it be possible to force Google and Apple to coordinate better to
avoid these dupes?  This is creating unnecessary work and making it
appear that webkit has a lot more issues than it really does.

Thanks,
Mike

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.