Bug 807588 (CVE-2011-3059, CVE-2011-3060)

Summary:	Webkitgtk: google chrome update [28-March-2012]
Product:	[Other] Security Response	Reporter:	Huzaifa S. Sidhpurwala <huzaifas>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-03-28 10:01:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	748383

Description Huzaifa S. Sidhpurwala 2012-03-28 09:13:59 UTC

This bug is to collect statements for Webkit-related CVE's that do not have
their own top-level CVE SRT bug because it did not affect the version of
webkitgtk or konquerer shipped with Red Hat Enterprise Linux. These statements
were also referred to as NVD statements and
are noted on the NVD web site.

This bug is used for webkit security issues disclosed in the following google
chrome security advisory:
http://googlechromereleases.blogspot.in/2012/03/stable-channel-release-and-beta-channel.html

Comment 1 Huzaifa S. Sidhpurwala 2012-03-28 09:56:05 UTC

CVE-2011-3059
-------------
http://code.google.com/p/chromium/issues/detail?id=112317
https://bugs.webkit.org/show_bug.cgi?id=80729
http://trac.webkit.org/changeset/110593

CVE-2011-3060
--------------
http://code.google.com/p/chromium/issues/detail?id=114056
https://bugs.webkit.org/show_bug.cgi?id=78534
Patch: http://trac.webkit.org/changeset/110332

Both the bugs cause an OOB read and results in crash only.

Note: Other flaws reported on the google chrome security advisory do not affect
Webkit

Comment 2 Huzaifa S. Sidhpurwala 2012-03-28 10:01:34 UTC

Statement CVE-2011-3059, CVE-2011-3060:

Not Vulnerable. This issue does not affect the version of webkitgtk as shipped
with Red Hat Enterprise Linux 6.