Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 5 Feb 2011 18:35:17 -0500
From: Michael Gilbert <>
Subject: Webkit Dupes


The following issues are duplicate CVE assignments for webkit.  Please
merge and reject these as appropriate.

CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662

CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667

CVE-2010-2302 and CVE-2010-1771:
webkit commit #59876

CVE-2010-2301 and CVE-2010-1762:
webkit commit #59241 and #59242

CVE-2010-2300 and CVE-2010-1759:
webkit commit #59109

CVE-2010-2902 and CVE-2010-1793:
webkit commit #62662 and #62482

CVE-2010-2647 and CVE-2010-1786:
webkit commit #61667

CVE-2010-2899 and CVE-2010-1783:
webkit commit #62134

CVE-2010-1769 and CVE-2010-1774:
webkit commit #59495
both are apple announcements, and the only difference in the CVE
descriptions is "itunes" vs "safari"

CVE-2010-2441 and CVE-2010-1757
webkit commit #58829
i'm not 100% sure about this one since there is no useful info in
CVE-2010-1757. the descriptions sound very much the same issue, but
descriptions differ by "webkit on apple" vs "webkit"

CVE-2010-1665 and CVE-2010-1417:
webkit commit #58201

CVE-2010-0651 and CVE-2010-0051:
webkit commit #52784

Would it be possible to force Google and Apple to coordinate better to
avoid these dupes?  This is creating unnecessary work and making it
appear that webkit has a lot more issues than it really does.


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.