[Git][security-tracker-team/security-tracker][master] Add new chromium issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jul 15 21:23:17 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6f4c6746 by Salvatore Bonaccorso at 2025-07-15T22:22:42+02:00
Add new chromium issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,11 @@
 CVE-2025-7667 (The Restrict File Access plugin for WordPress is vulnerable to Cross-S ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-7657 (Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allo ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2025-7656 (Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowe ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2025-7042 (Use After Free vulnerability exists in the IPT file reading procedure  ...)
 	NOT-FOR-US: Dassault Systemes
 CVE-2025-6974 (Use of Uninitialized Variable vulnerability exists in the JT file read ...)
@@ -17,7 +19,8 @@ CVE-2025-6971 (Use After Free vulnerability exists in the CATPRODUCT file readin
 CVE-2025-6965 (There exists a vulnerability in SQLite versions before 3.50.2 where th ...)
 	TODO: check
 CVE-2025-6558 (Insufficient validation of untrusted input in ANGLE and GPU in Google  ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2025-53959 (In JetBrains YouTrack before 2025.2.86069,  2024.3.85077,  2025.1.8619 ...)
 	NOT-FOR-US: JetBrains
 CVE-2025-53903 (The Scratch Channel is a news website that is under development as of  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f4c67467edf8c1306dee6cc714c138094655d86

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f4c67467edf8c1306dee6cc714c138094655d86
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250715/648c793a/attachment.htm>


More information about the debian-security-tracker-commits mailing list