[Git][security-tracker-team/security-tracker][master] Skia now in the archive, needs to be checked for fixed status

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Mar 29 11:47:18 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
40d2d539 by Salvatore Bonaccorso at 2026-03-29T12:46:52+02:00
Skia now in the archive, needs to be checked for fixed status

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82820,7 +82820,7 @@ CVE-2025-35451 (PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras
 CVE-2025-32320 (In System UI, there is a possible way to view other users' images due  ...)
 	NOT-FOR-US: Android
 CVE-2025-32318 (In Skia, there is a possible out of bounds write due to a heap buffer  ...)
-	- skia <itp> (bug #1117470)
+	- skia <undetermined>
 CVE-2025-32317 (In App Widget, there is a possible Information Disclosure due to a con ...)
 	NOT-FOR-US: Android
 CVE-2025-32316 (In gralloc4, there is a possible out of bounds write due to a missing  ...)
@@ -162403,11 +162403,11 @@ CVE-2024-47032 (In construct_transaction_from_cmd of lwis_ioctl.c, there is a po
 CVE-2024-43769 (In isPackageDeviceAdmin of PackageManagerService.java, there is a poss ...)
 	NOT-FOR-US: Android
 CVE-2024-43768 (In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...)
-	- skia <itp> (bug #1117470)
+	- skia <undetermined>
 	NOTE: Firefox/Thunderbird embeds a copy of Skia, but the code isn't used/reachable as
 	NOTE: confirmed by the Mozilla security team
 CVE-2024-43767 (In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a p ...)
-	- skia <itp> (bug #1117470)
+	- skia <undetermined>
 	NOTE: Firefox/Thunderbird embeds a copy of Skia, but the code isn't used/reachable as
 	NOTE: confirmed by the Mozilla security team
 CVE-2024-43764 (In onPrimaryClipChanged of ClipboardListener.java, there is a possible ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d2d539baf5d938345dc87234dbae720290234c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d2d539baf5d938345dc87234dbae720290234c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260329/e0852524/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list