[Secure-testing-commits] r14154 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-02-25 03:29:31 +0000 (Thu, 25 Feb 2010)
New Revision: 14154

Modified:
   data/CVE/list
Log:
close out the last of the old webkit issues!

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-24 17:50:51 UTC (rev 14153)
+++ data/CVE/list	2010-02-25 03:29:31 UTC (rev 14154)
@@ -27454,8 +27454,9 @@
 CVE-2008-1589 (Safari on Apple iPhone before 2.0 and iPod touch before 2.0 ...)
 	NOT-FOR-US: iPhone
 CVE-2008-1588 (Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows ...)
-	- webkit <unfixed> (medium; bug #535793)
-	TODO: work with upstream to determine affected/not-affected webkit versions
+	- webkit <not-affected> (mac-specific issue)
+	NOTE: http://trac.webkit.org/changeset/23963
+	NOTE: as of 1.1.21, all mac-specific code is no longer even present
 CVE-2008-1587
 	RESERVED
 CVE-2008-1586 (ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod ...)
@@ -58383,11 +58384,11 @@
 	- thunderbird 1.5.0.4-1 (medium)
 	- mozilla 2:1.7.13-0.3 (medium)
 	- xulrunner 1.8.0.4-1 (medium)
-	- webkit <undetermined> (bug #535793)
+	- webkit 1.0.1-1 (bug #535793)
+	NOTE: http://trac.webkit.org/changeset/33380
 	- qt4-x11 <undetermined> (bug #561760)
 	- kdelibs <undetermined> (bug #561765)
 	- kde4libs <undetermined> (bug #561762)
-	TODO: work with upstream to determine affected/not-affected webkit versions
 CVE-2006-2782 (Firefox 1.5.0.2 does not fix all test cases associated with ...)
 	{DSA-1134-1 DSA-1120 DSA-1118}
 	NOTE: MFSA-2006-41