[Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Nov 2 07:16:52 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dc092f80 by Salvatore Bonaccorso at 2026-11-02T08:16:18+01:00
Track fixed version for chromium issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1945,21 +1945,21 @@ CVE-2026-90437 (The Gravity Forms plugin for WordPress is vulnerable to Stored C
CVE-2026-89435 (The Formidable Forms \u2013 WordPress Form Builder for Contact Forms, ...)
NOT-FOR-US: WordPress plugin
CVE-2026-76031 (Use after free in Input in Google Chrome prior to 156.0.8078.79 allowe ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76030 (Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.7 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76029 (Memory corruption in Network in Google Chrome prior to 156.0.8078.79 a ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76028 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 a ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76027 (Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76026 (Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76025 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 a ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-76024 (Memory corruption in MediaStream in Google Chrome prior to 156.0.8078. ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-74915 (A web page that contains unusual WebGPU content loaded into the GPU GL ...)
NOT-FOR-US: Imagination Technologies
CVE-2026-74912 (On GPU systems with the security vulnerability fix for CVE-2026-49746 ...)
@@ -2062,33 +2062,33 @@ CVE-2026-119276 (MariaDB Connector/J is used to connect applications developed i
NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-h599-m3w5-9m7x
NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/b9e1ee8d9b4d820d70719504cdfd5c97f1aede5f (3.5.11)
CVE-2026-119272 (Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078. ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119271 (Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-119270 (Improper input validation in CacheStorage in Google Chrome prior to 15 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119269 (Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowe ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119268 (Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 al ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119267 (Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allow ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119266 (Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowe ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119265 (Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 all ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119264 (Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allo ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119263 (Memory corruption in GarbageCollection in Google Chrome prior to 156.0 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119262 (Improper input validation in V8 in Google Chrome prior to 156.0.8078.7 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119261 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119260 (Use after free in Frames in Google Chrome prior to 156.0.8078.79 allow ...)
- - chromium <unfixed>
+ - chromium 156.0.8078.79-1
CVE-2026-119210 (MariaDB Connector/J is used to connect applications developed in Java ...)
- mariadb-connector-java <unfixed> (bug #1152641)
NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-fhx5-2xqw-2cgm
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc092f8085ebd183b82c0d591c7ed6f2dd28ca88
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc092f8085ebd183b82c0d591c7ed6f2dd28ca88
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/087cd88f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list