3465
by Marc Deslauriers
- check-cves run |
1 |
Candidate: CVE-2011-0165 |
2 |
PublicDate: 2011-03-03 |
|
3 |
References: |
|
10729
by Marc Deslauriers
change all mitre urls to https |
4 |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0165 |
3465
by Marc Deslauriers
- check-cves run |
5 |
http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html |
6 |
Description: |
|
7 |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows |
|
8 |
man-in-the-middle attackers to execute arbitrary code or cause a denial of |
|
9 |
service (memory corruption and application crash) via vectors related to |
|
10 |
iTunes Store browsing, a different vulnerability than other CVEs listed in |
|
11 |
APPLE-SA-2011-03-02-1. |
|
12 |
Ubuntu-Description: |
|
13 |
Notes: |
|
4501
by Jamie Strandboge
update webkit boilerplate and README.webkit. boilerplate shouldn't list qt4-x11 |
14 |
jdstrand> qt4-x11 unmaintained upstream (see README.webkit for details) |
3465
by Marc Deslauriers
- check-cves run |
15 |
Bugs: |
16 |
Priority: medium |
|
17 |
Discovered-by: |
|
6259
by Jamie Strandboge
update flash CVE |
18 |
Assigned-to: |
3465
by Marc Deslauriers
- check-cves run |
19 |
|
20 |
Patches_webkit: |
|
21 |
upstream_webkit: needs-triage |
|
22 |
dapper_webkit: DNE |
|
3688
by Micah Gersten
* Change webkit boilerplate and open CVEs for hardy to ignored (reached end-of-life) |
23 |
hardy_webkit: ignored (reached end-of-life) |
3650
by Kees Cook
karmic is EOL |
24 |
karmic_webkit: ignored (reached end-of-life) |
6865
by Jamie Strandboge
scripts/cve_lib.py: lucid is now partially supported |
25 |
lucid_webkit: ignored (reached end-of-life) |
5094
by Jamie Strandboge
perform EOL checklist (https://wiki.ubuntu.com/SecurityTeam/ReleaseCycle) for |
26 |
maverick_webkit: ignored (reached end-of-life) |
5981
by Jamie Strandboge
EOL natty |
27 |
natty_webkit: ignored (reached end-of-life) |
6823
by Jamie Strandboge
hardy and oneiric are EOL |
28 |
oneiric_webkit: ignored (reached end-of-life) |
12233
by Emily Ratliff
marking webkit CVEs ignored |
29 |
precise_webkit: ignored (no update available) |
8065
by Marc Deslauriers
retire quantal. RIP. |
30 |
quantal_webkit: ignored (reached end-of-life) |
7689
by Marc Deslauriers
retire raring |
31 |
raring_webkit: ignored (reached end-of-life) |
8246
by Marc Deslauriers
retire saucy. RIP. |
32 |
saucy_webkit: ignored (reached end-of-life) |
7949
by Marc Deslauriers
updated for trusty release |
33 |
trusty_webkit: DNE |
8644
by Seth Arnold
utopic released |
34 |
utopic_webkit: DNE |
9373
by Marc Deslauriers
performed release checklist |
35 |
vivid_webkit: DNE |
10484.1.15
by Jamie Strandboge
update active/CVE-* for overlay ppas |
36 |
vivid/stable-phone-overlay_webkit: DNE |
37 |
vivid/ubuntu-core_webkit: DNE |
|
10109
by Tyler Hicks
performed release checklist for Wily |
38 |
wily_webkit: DNE |
10924
by Tyler Hicks
performed release checklist for Xenial |
39 |
xenial_webkit: DNE |
11637
by Steve Beattie
Release cycle process for Yakkety |
40 |
yakkety_webkit: DNE |
7853
by Marc Deslauriers
process_cves run |
41 |
devel_webkit: DNE |
42 |
||
43 |
Patches_webkitgtk: |
|
44 |
upstream_webkitgtk: needs-triage |
|
45 |
lucid_webkitgtk: DNE |
|
46 |
precise_webkitgtk: DNE |
|
47 |
quantal_webkitgtk: DNE |
|
48 |
saucy_webkitgtk: DNE |
|
10806
by Marc Deslauriers
updated ancient CVEs for webkit versions in trusty+ |
49 |
trusty_webkitgtk: not-affected (2.4.8-1ubuntu1~ubuntu14.04.1) |
9721
by Marc Deslauriers
retire utopic |
50 |
utopic_webkitgtk: ignored (reached end-of-life) |
10579
by Marc Deslauriers
retire vivid |
51 |
vivid_webkitgtk: ignored (reached end-of-life) |
10484.1.15
by Jamie Strandboge
update active/CVE-* for overlay ppas |
52 |
vivid/stable-phone-overlay_webkitgtk: DNE |
53 |
vivid/ubuntu-core_webkitgtk: DNE |
|
10806
by Marc Deslauriers
updated ancient CVEs for webkit versions in trusty+ |
54 |
wily_webkitgtk: not-affected (2.4.9-2ubuntu2) |
10924
by Tyler Hicks
performed release checklist for Xenial |
55 |
xenial_webkitgtk: not-affected (2.4.9-2ubuntu2) |
11637
by Steve Beattie
Release cycle process for Yakkety |
56 |
yakkety_webkitgtk: not-affected (2.4.9-2ubuntu2) |
10806
by Marc Deslauriers
updated ancient CVEs for webkit versions in trusty+ |
57 |
devel_webkitgtk: not-affected (2.4.9-2ubuntu2) |
3465
by Marc Deslauriers
- check-cves run |
58 |
|
59 |
Patches_qt4-x11: |
|
60 |
upstream_qt4-x11: needs-triage |
|
61 |
dapper_qt4-x11: not-affected (no webkit) |
|
62 |
hardy_qt4-x11: not-affected (no webkit) |
|
3650
by Kees Cook
karmic is EOL |
63 |
karmic_qt4-x11: ignored (reached end-of-life) |
4501
by Jamie Strandboge
update webkit boilerplate and README.webkit. boilerplate shouldn't list qt4-x11 |
64 |
lucid_qt4-x11: ignored (see notes) |
3465
by Marc Deslauriers
- check-cves run |
65 |
maverick_qt4-x11: not-affected (webkit isn't built) |
3647
by Jamie Strandboge
run scripts/release-cycle-released |
66 |
natty_qt4-x11: not-affected (webkit isn't built) |
4240
by Jamie Strandboge
update for oneiric release and precise open |
67 |
oneiric_qt4-x11: not-affected (webkit isn't built) |
5154
by Jamie Strandboge
precise is released. Perform release cycle duties |
68 |
precise_qt4-x11: not-affected (webkit isn't built) |
5948
by Jamie Strandboge
ReleaseCycle duties for quantal is released and raring opens |
69 |
quantal_qt4-x11: not-affected (webkit isn't built) |
6756
by Jamie Strandboge
./scripts/release-cycle-released raring |
70 |
raring_qt4-x11: not-affected (webkit isn't built) |
7369
by Jamie Strandboge
perform release cycle duties for saucy |
71 |
saucy_qt4-x11: not-affected (webkit isn't built) |
7949
by Marc Deslauriers
updated for trusty release |
72 |
trusty_qt4-x11: not-affected (webkit isn't built) |
8644
by Seth Arnold
utopic released |
73 |
utopic_qt4-x11: not-affected (webkit isn't built) |
9373
by Marc Deslauriers
performed release checklist |
74 |
vivid_qt4-x11: not-affected (webkit isn't built) |
10484.1.15
by Jamie Strandboge
update active/CVE-* for overlay ppas |
75 |
vivid/stable-phone-overlay_qt4-x11: DNE |
76 |
vivid/ubuntu-core_qt4-x11: DNE |
|
10109
by Tyler Hicks
performed release checklist for Wily |
77 |
wily_qt4-x11: not-affected (webkit isn't built) |
10924
by Tyler Hicks
performed release checklist for Xenial |
78 |
xenial_qt4-x11: not-affected (webkit isn't built) |
11637
by Steve Beattie
Release cycle process for Yakkety |
79 |
yakkety_qt4-x11: not-affected (webkit isn't built) |
3465
by Marc Deslauriers
- check-cves run |
80 |
devel_qt4-x11: not-affected (webkit isn't built) |
81 |
||
82 |
Patches_qtwebkit-source: |
|
83 |
upstream_qtwebkit-source: needs-triage |
|
84 |
dapper_qtwebkit-source: DNE |
|
85 |
hardy_qtwebkit-source: DNE |
|
86 |
karmic_qtwebkit-source: DNE |
|
87 |
lucid_qtwebkit-source: DNE |
|
5094
by Jamie Strandboge
perform EOL checklist (https://wiki.ubuntu.com/SecurityTeam/ReleaseCycle) for |
88 |
maverick_qtwebkit-source: ignored (reached end-of-life) |
5981
by Jamie Strandboge
EOL natty |
89 |
natty_qtwebkit-source: ignored (reached end-of-life) |
6823
by Jamie Strandboge
hardy and oneiric are EOL |
90 |
oneiric_qtwebkit-source: ignored (reached end-of-life) |
12237
by Emily Ratliff
marked CVEs for qtwebkit-source qtwebkit-opensource-src webkitgtk as ignored |
91 |
precise_qtwebkit-source: ignored (no update available) |
8065
by Marc Deslauriers
retire quantal. RIP. |
92 |
quantal_qtwebkit-source: ignored (reached end-of-life) |
7689
by Marc Deslauriers
retire raring |
93 |
raring_qtwebkit-source: ignored (reached end-of-life) |
8246
by Marc Deslauriers
retire saucy. RIP. |
94 |
saucy_qtwebkit-source: ignored (reached end-of-life) |
12237
by Emily Ratliff
marked CVEs for qtwebkit-source qtwebkit-opensource-src webkitgtk as ignored |
95 |
trusty_qtwebkit-source: ignored (no update available) |
9721
by Marc Deslauriers
retire utopic |
96 |
utopic_qtwebkit-source: ignored (reached end-of-life) |
10579
by Marc Deslauriers
retire vivid |
97 |
vivid_qtwebkit-source: ignored (reached end-of-life) |
10484.1.15
by Jamie Strandboge
update active/CVE-* for overlay ppas |
98 |
vivid/stable-phone-overlay_qtwebkit-source: DNE |
99 |
vivid/ubuntu-core_qtwebkit-source: DNE |
|
11295
by Tyler Hicks
Perform Wily EOL tasks |
100 |
wily_qtwebkit-source: ignored (reached end-of-life) |
12237
by Emily Ratliff
marked CVEs for qtwebkit-source qtwebkit-opensource-src webkitgtk as ignored |
101 |
xenial_qtwebkit-source: ignored (no update available) |
102 |
yakkety_qtwebkit-source: ignored (no update available) |
|
103 |
devel_qtwebkit-source: ignored (no update available) |
|
3465
by Marc Deslauriers
- check-cves run |
104 |