[Git][security-tracker-team/security-tracker][master] 2 commits: Add new chromium issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0e5bfdfd by Salvatore Bonaccorso at 2026-07-15T19:54:10+02:00
Add new chromium issues

- - - - -
e912dd16 by Salvatore Bonaccorso at 2026-07-15T19:54:51+02:00
Add chromium to dsa-needed list

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1662,35 +1662,50 @@ CVE-2026-23573 (An Improper Neutralization of Input During Web Page Generation (
 CVE-2026-21840 (HCL BigFix Platform is affected by a user enumeration vulnerability wh ...)
 	NOT-FOR-US: HCL
 CVE-2026-15778 (Insufficient validation of untrusted input in Navigation in Google Chr ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15777 (Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15776 (Inappropriate implementation in V8 in Google Chrome prior to 150.0.787 ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15775 (Inappropriate implementation in V8 in Google Chrome prior to 150.0.787 ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15774 (Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowe ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15773 (Use after free in Core in Google Chrome on Windows prior to 150.0.7871 ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15772 (Use after free in GPU in Google Chrome on Android prior to 150.0.7871. ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15771 (Insufficient validation of untrusted input in Media in Google Chrome o ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15770 (Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allow ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15769 (Insufficient validation of untrusted input in Linux Toolkit Theming in ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15768 (Insufficient policy enforcement in HTML-in-Canvas in Google Chrome pri ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15767 (Heap buffer overflow in libyuv in Google Chrome on Windows prior to 15 ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15766 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 all ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15765 (Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allow ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15764 (Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871. ...)
-	TODO: check
+	- chromium <unfixed>
+	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15757 (A security flaw was discovered in the NETGEAR DGND3700v1 that could al ...)
 	NOT-FOR-US: Netgear
 CVE-2026-15753 (A vulnerability was determined in zhinianboke xianyu-auto-reply on Ser ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -29,6 +29,8 @@ cacti
 --
 caddy
 --
+chromium (dilinger)
+--
 cockpit
 --
 containerd



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4fbd105020c07e43e3710ff2b041ee64a58655fe...e912dd16adea7f91bf214f37fe3de19699668b91

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4fbd105020c07e43e3710ff2b041ee64a58655fe...e912dd16adea7f91bf214f37fe3de19699668b91
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260715/27465989/attachment-0001.htm>