Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ff75eda3 by Moritz Muehlenhoff at 2026-10-12T09:25:31+02:00
track some chromium issues also for libskia
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5336,6 +5336,8 @@ CVE-2026-106400 (Clickjacking in Messages in Google
Chrome on on Android prior t
- chromium 155.0.8059.39-1
CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to
155.0.8059.39 all ...)
- chromium 155.0.8059.39-1
+ - libskia <unfixed> (unimportant)
+ NOTE: skia not covered by security support
CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to
155.0.8059. ...)
- chromium 155.0.8059.39-1
CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS
prior to ...)
@@ -5376,6 +5378,8 @@ CVE-2026-106380 (UI misrepresentation in UI in Google
Chrome prior to 155.0.8059
- chromium 155.0.8059.39-1
CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to
155.0.8059.39 ...)
- chromium 155.0.8059.39-1
+ - libskia <unfixed> (unimportant)
+ NOTE: skia not covered by security support
CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac
prior to 155 ...)
- chromium 155.0.8059.39-1
CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to
155.0.8059.39 allowe ...)
@@ -9073,6 +9077,8 @@ CVE-2026-103630 (Use after free in FedCM in Google Chrome
prior to 154.0.8037.97
- chromium 155.0.8059.39-1
CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to
154.0.8037.97 allow ...)
- chromium 155.0.8059.39-1
+ - libskia <unfixed> (unimportant)
+ NOTE: skia not covered by security support
CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to
154.0.8037.97 a ...)
- chromium 155.0.8059.39-1
CVE-2026-103627 (Information leak in SVG in Google Chrome prior to
154.0.8037.97 allowe ...)
@@ -13665,6 +13671,8 @@ CVE-2026-102309 (Use after free in FullScreen in Google
Chrome prior to 154.0.80
CVE-2026-102325 (Uninitialized resource in Skia in Google Chrome prior to
154.0.8037.92 ...)
{DSA-6535-1 DLA-4811-1}
- chromium 154.0.8037.92-1
+ - libskia <unfixed> (unimportant)
+ NOTE: skia not covered by security support
CVE-2026-102308 (Use after free in Views in Google Chrome prior to
154.0.8037.92 allowe ...)
{DSA-6535-1 DLA-4811-1}
- chromium 154.0.8037.92-1
@@ -26513,6 +26521,8 @@ CVE-2026-93393 (A heap-based buffer overflow exists in
the TLS transport layer o
CVE-2026-93387 (Improper state validation in Skia in Google Chrome prior to
153.0.8010 ...)
{DSA-6508-1 DLA-4790-1}
- chromium 153.0.8010.52-1
+ - libskia <unfixed> (unimportant)
+ NOTE: skia not covered by security support
CVE-2026-93386 (UI misrepresentation in WebAppInstalls in Google Chrome prior
to 153.0 ...)
{DSA-6508-1 DLA-4790-1}
- chromium 153.0.8010.52-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff75eda39cce13a8dd5719ccd52eac57165b3ca6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff75eda39cce13a8dd5719ccd52eac57165b3ca6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
