Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cacee0f3 by Salvatore Bonaccorso at 2026-10-03T13:37:44+02:00
Add new chromium issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -893,27 +893,27 @@ CVE-2026-103762 (SiYuan before v3.8.5 contains a missing
authorization vulnerabi
CVE-2026-103648 (Path traversal in image-downloader 4.3.0 allows an attacker
who can co ...)
NOT-FOR-US: image-downloader
CVE-2026-103631 (Buffer overflow in WebRTC in Google Chrome prior to
154.0.8037.97 allo ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to
154.0.8037.97 allowe ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to
154.0.8037.97 allow ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to
154.0.8037.97 a ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103627 (Information leak in SVG in Google Chrome prior to
154.0.8037.97 allowe ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103626 (Incorrect authorization in FileSystem in Google Chrome on on
Windows p ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103625 (Type confusion in V8 in Google Chrome prior to 154.0.8037.97
allowed a ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103624 (Use after free in Contextual Tasks in Google Chrome on on
Windows prio ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103623 (Use after free in MediaStream in Google Chrome prior to
154.0.8037.97 ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103622 (Use after free in SVG in Google Chrome prior to 154.0.8037.97
allowed ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103621 (Integer overflow in Compositing in Google Chrome prior to
154.0.8037.9 ...)
- TODO: check
+ - chromium <unfixed>
CVE-2026-103604 (Inefficient algorithmic complexity in X.509 distinguished
name string ...)
NOT-FOR-US: Bouncycastle components not packaged in Debian
CVE-2026-103603 (Memory allocation with excessive size value in the HSS/LMS
signature c ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cacee0f3bb8e22c916fdc4512ee65f79092d582f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cacee0f3bb8e22c916fdc4512ee65f79092d582f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
