Bug 817755 (CVE-2011-3078, CVE-2011-3081, CVE-2012-1521)

Summary:	Webkitgtk: google chrome update [30-April-2012]
Product:	[Other] Security Response	Reporter:	Huzaifa S. Sidhpurwala <huzaifas>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	mjc, security-response-team, stransky
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-05-01 07:06:48 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	748383

Description Huzaifa S. Sidhpurwala 2012-05-01 06:39:26 UTC

This bug is to collect statements for Webkit-related CVE's that do not have their own top-level CVE SRT bug because it did not affect the version of webkitgtk or konquerer shipped with Red Hat Enterprise Linux. These statements were also referred to as NVD statements and are noted on the NVD web site.

This bug is used for webkit security issues disclosed in the following google chrome security advisory:
http://googlechromereleases.blogspot.in/2012/04/stable-channel-update_30.html

Comment 1 Huzaifa S. Sidhpurwala 2012-05-01 07:04:42 UTC

Statement:

Not Vulnerable. This issue does not affect the version of webkitgtk as shipped
with Red Hat Enterprise Linux 6.

Comment 2 Huzaifa S. Sidhpurwala 2012-05-01 07:05:35 UTC

This issue did not affect the version of webkitgtk and webkitgtk3 as shipped with Fedora 15 and Fedora 16