[Git][security-tracker-team/security-tracker][master] webkit2gtk fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Oct 1 22:16:45 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7ccdb830 by Moritz Muehlenhoff at 2026-10-01T23:16:22+02:00
webkit2gtk fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25965,7 +25965,7 @@ CVE-2026-86900 (An out-of-bounds read issue was addressed with improved input va
NOT-FOR-US: Apple
CVE-2026-86898 (A logic issue was addressed with improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -26025,7 +26025,7 @@ CVE-2026-84636 (An authorization issue was addressed with improved state managem
NOT-FOR-US: Apple
CVE-2026-84635 (A logic issue was addressed with improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -26403,7 +26403,7 @@ CVE-2026-64756 (A path handling issue was addressed with improved validation. Th
NOT-FOR-US: Apple
CVE-2026-64753 (A permissions issue was addressed by removing the vulnerable code. Thi ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -42453,7 +42453,7 @@ CVE-2026-83744 (A security vulnerability has been detected in invoiceninja Invoi
CVE-2026-83743 (A weakness has been identified in invoiceninja Invoice Ninja up to 5.1 ...)
NOT-FOR-US: invoiceninja Invoice Ninja
CVE-2026-83596 (A flaw was found in WebKitGTK. Processing malicious web content can ca ...)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[trixie] - webkit2gtk <postponed> (Fix along with future DSA)
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
- wpewebkit <unfixed>
@@ -48280,7 +48280,7 @@ CVE-2026-79275 (Use after free in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48308,7 +48308,7 @@ CVE-2026-79270 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48320,7 +48320,7 @@ CVE-2026-79269 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48484,7 +48484,7 @@ CVE-2026-79229 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48652,7 +48652,7 @@ CVE-2026-79189 (Out of bounds write in ANGLE in Google Chrome prior to 152.0.797
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48664,7 +48664,7 @@ CVE-2026-79188 (Out of bounds write in ANGLE in Google Chrome prior to 152.0.797
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48756,7 +48756,7 @@ CVE-2026-79149 (Use after free in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48773,7 +48773,7 @@ CVE-2026-79147 (Information leak in Skia in Google Chrome prior to 152.0.7977.65
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48790,7 +48790,7 @@ CVE-2026-79144 (Information leak in Skia in Google Chrome prior to 152.0.7977.65
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48846,7 +48846,7 @@ CVE-2026-79131 (Out of bounds write in ANGLE in Google Chrome prior to 152.0.797
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48858,7 +48858,7 @@ CVE-2026-79130 (Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48878,7 +48878,7 @@ CVE-2026-79127 (Out of bounds write in ANGLE in Google Chrome prior to 152.0.797
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48914,7 +48914,7 @@ CVE-2026-79120 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48930,7 +48930,7 @@ CVE-2026-79118 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -48951,7 +48951,7 @@ CVE-2026-79112 (Out of bounds read in Skia in Google Chrome prior to 152.0.7977.
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49191,7 +49191,7 @@ CVE-2026-79043 (Out of bounds write in ANGLE in Google Chrome prior to 152.0.797
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49275,7 +49275,7 @@ CVE-2026-79020 (Out of bounds read in Skia in Google Chrome prior to 152.0.7977.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49452,7 +49452,7 @@ CVE-2026-78965 (Uninitialized resource in ANGLE in Google Chrome prior to 152.0.
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49488,7 +49488,7 @@ CVE-2026-78958 (Uninitialized resource in Skia in Google Chrome prior to 152.0.7
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49602,7 +49602,7 @@ CVE-2026-78914 (Uninitialized resource in Skia in Google Chrome prior to 152.0.7
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49642,7 +49642,7 @@ CVE-2026-78906 (Race condition in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49654,7 +49654,7 @@ CVE-2026-78905 (Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -49666,7 +49666,7 @@ CVE-2026-78904 (Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65
{DSA-6534-1 DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -50023,7 +50023,7 @@ CVE-2026-44476 (Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version
NOTE: Fixed by: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/561af83dcf71b95b3772dfbc0a1796c7f50b2175 (v1.10.0)
CVE-2026-43670 (A Content Security Policy bypass was addressed with improved enforceme ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -51259,7 +51259,7 @@ CVE-2026-78380 (RansomLook fails to enforce the privacy status of ransomware gro
CVE-2026-78378 (Ransomlook contains a Redis glob pattern injection vulnerability cause ...)
NOT-FOR-US: RansomLook
CVE-2026-78376 (A flaw was found in WebKitGTK. Processing malicious web content can ca ...)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[trixie] - webkit2gtk <postponed> (Fix along with future DSA)
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
@@ -58338,7 +58338,7 @@ CVE-2026-76041 (Information leak in Skia in Google Chrome prior to 151.0.7922.16
- chromium 151.0.7922.169-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59702,7 +59702,7 @@ CVE-2026-65640 (WordPress is vulnerable to a remote code execution vulnerability
NOTE: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
CVE-2026-65351 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59720,7 +59720,7 @@ CVE-2026-65343 (A use after free issue was addressed with improved memory manage
NOT-FOR-US: Apple
CVE-2026-65341 (The issue was addressed with improved memory handling. This issue is f ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59730,7 +59730,7 @@ CVE-2026-65341 (The issue was addressed with improved memory handling. This issu
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65340 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59742,7 +59742,7 @@ CVE-2026-65339 (A logic issue was addressed with improved checks. This issue is
NOT-FOR-US: Apple
CVE-2026-65338 (The issue was addressed with improved memory handling. This issue is f ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59752,7 +59752,7 @@ CVE-2026-65338 (The issue was addressed with improved memory handling. This issu
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65337 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59762,7 +59762,7 @@ CVE-2026-65337 (This issue was addressed through improved state management. This
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65336 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59774,7 +59774,7 @@ CVE-2026-65335 (This issue was addressed through improved state management. This
NOT-FOR-US: Apple
CVE-2026-65334 (A memory corruption issue was addressed with improved state management ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59784,7 +59784,7 @@ CVE-2026-65334 (A memory corruption issue was addressed with improved state mana
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65333 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59794,7 +59794,7 @@ CVE-2026-65333 (This issue was addressed through improved state management. This
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65332 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59804,7 +59804,7 @@ CVE-2026-65332 (This issue was addressed through improved state management. This
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-65331 (This issue was addressed through improved state management. This issue ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59832,7 +59832,7 @@ CVE-2026-64787 (A use-after-free issue was addressed with improved memory manage
NOTE: https://webkitgtk.org/security/WSA-2026-0005.html
CVE-2026-64784 (An out-of-bounds access issue was addressed with improved bounds check ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59842,7 +59842,7 @@ CVE-2026-64784 (An out-of-bounds access issue was addressed with improved bounds
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-64782 (A memory corruption vulnerability was addressed with improved locking. ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59852,7 +59852,7 @@ CVE-2026-64782 (A memory corruption vulnerability was addressed with improved lo
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-64781 (The issue was addressed with improved input validation. This issue is ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59862,7 +59862,7 @@ CVE-2026-64781 (The issue was addressed with improved input validation. This iss
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-64780 (The issue was addressed with improved checks. This issue is fixed in S ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59872,7 +59872,7 @@ CVE-2026-64780 (The issue was addressed with improved checks. This issue is fixe
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-64779 (A memory corruption vulnerability was addressed with improved locking. ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59882,7 +59882,7 @@ CVE-2026-64779 (A memory corruption vulnerability was addressed with improved lo
NOTE: https://webkitgtk.org/security/WSA-2026-0006.html
CVE-2026-64778 (The issue was addressed with improved checks. This issue is fixed in S ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -59894,7 +59894,7 @@ CVE-2026-64760 (An information leakage was addressed with additional validation.
NOT-FOR-US: Apple
CVE-2026-64715 (A use-after-free issue was addressed with improved memory management. ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -75677,7 +75677,7 @@ CVE-2026-19160 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.1
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -75690,7 +75690,7 @@ CVE-2026-19161 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.1
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -75730,7 +75730,7 @@ CVE-2026-19173 (Out of bounds write in Skia in Google Chrome prior to 151.0.7922
{DSA-6534-1 DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -75752,7 +75752,7 @@ CVE-2026-19176 (Use after free in Skia in Google Chrome prior to 151.0.7922.109
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81200,7 +81200,7 @@ CVE-2026-17914 (Side-channel information leakage in Skia in Google Chrome prior
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81476,7 +81476,7 @@ CVE-2026-17847 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81544,7 +81544,7 @@ CVE-2026-17832 (Use after free in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81676,7 +81676,7 @@ CVE-2026-17801 (Out of bounds read and write in ANGLE in Google Chrome prior to
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81748,7 +81748,7 @@ CVE-2026-17785 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81812,7 +81812,7 @@ CVE-2026-17771 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.7
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81878,7 +81878,7 @@ CVE-2026-17757 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.7
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81914,7 +81914,7 @@ CVE-2026-17750 (Use after free in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81943,7 +81943,7 @@ CVE-2026-17745 (Out of bounds read in Skia in Google Chrome prior to 151.0.7922.
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -81971,7 +81971,7 @@ CVE-2026-17740 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82055,7 +82055,7 @@ CVE-2026-17721 (Out of bounds write in ANGLE in Google Chrome prior to 151.0.792
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82075,7 +82075,7 @@ CVE-2026-17718 (Use after free in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82087,7 +82087,7 @@ CVE-2026-17717 (Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.7
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82107,7 +82107,7 @@ CVE-2026-17714 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82156,7 +82156,7 @@ CVE-2026-17704 (Use after free in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82173,7 +82173,7 @@ CVE-2026-17702 (Inappropriate implementation in Skia in Google Chrome prior to 1
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82201,7 +82201,7 @@ CVE-2026-17697 (Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82241,7 +82241,7 @@ CVE-2026-17689 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82257,7 +82257,7 @@ CVE-2026-17687 (Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82281,7 +82281,7 @@ CVE-2026-17683 (Inappropriate implementation in ANGLE in Google Chrome prior to
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82293,7 +82293,7 @@ CVE-2026-17682 (Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.7
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82317,7 +82317,7 @@ CVE-2026-17678 (Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82337,7 +82337,7 @@ CVE-2026-17675 (Out of bounds write in ANGLE in Google Chrome prior to 151.0.792
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82361,7 +82361,7 @@ CVE-2026-17671 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82381,7 +82381,7 @@ CVE-2026-17668 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82393,7 +82393,7 @@ CVE-2026-17667 (Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82449,7 +82449,7 @@ CVE-2026-17655 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -82466,7 +82466,7 @@ CVE-2026-17653 (Use after free in Skia in Google Chrome prior to 151.0.7922.72 a
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -91664,7 +91664,7 @@ CVE-2026-16413 (Out of bounds write in ANGLE in Google Chrome prior to 150.0.787
{DSA-6534-1 DSA-6396-1 DLA-4701-1}
- chromium 150.0.7871.181-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -91689,7 +91689,7 @@ CVE-2026-16417 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.1
- chromium 150.0.7871.181-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -99709,7 +99709,7 @@ CVE-2026-15774 (Use after free in Skia in Google Chrome prior to 150.0.7871.125
- chromium 150.0.7871.124-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -99750,7 +99750,7 @@ CVE-2026-15766 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.1
- chromium 150.0.7871.124-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -102993,7 +102993,7 @@ CVE-2026-15109 (Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.
{DSA-6534-1 DSA-6387-1 DLA-4677-1}
- chromium 150.0.7871.114-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106669,7 +106669,7 @@ CVE-2026-14429 (Insufficient validation of untrusted input in Skia in Google Chr
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106686,7 +106686,7 @@ CVE-2026-14427 (Heap buffer overflow in Skia in Google Chrome prior to 150.0.787
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106702,7 +106702,7 @@ CVE-2026-14425 (Use after free in ANGLE in Google Chrome prior to 150.0.7871.46
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106735,7 +106735,7 @@ CVE-2026-14419 (Use after free in Skia in Google Chrome prior to 150.0.7871.46 a
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106747,7 +106747,7 @@ CVE-2026-14418 (Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106772,7 +106772,7 @@ CVE-2026-14414 (Insufficient validation of untrusted input in Skia in Google Chr
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106784,7 +106784,7 @@ CVE-2026-14413 (Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106796,7 +106796,7 @@ CVE-2026-14412 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106808,7 +106808,7 @@ CVE-2026-14411 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106821,7 +106821,7 @@ CVE-2026-14410 (Inappropriate implementation in Skia in Google Chrome prior to 1
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106869,7 +106869,7 @@ CVE-2026-14400 (Out of bounds write in ANGLE in Google Chrome prior to 150.0.787
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106885,7 +106885,7 @@ CVE-2026-14398 (Use after free in ANGLE in Google Chrome prior to 150.0.7871.46
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106901,7 +106901,7 @@ CVE-2026-14396 (Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106933,7 +106933,7 @@ CVE-2026-14390 (Use after free in ANGLE in Google Chrome prior to 150.0.7871.46
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106946,7 +106946,7 @@ CVE-2026-14389 (Integer overflow in Skia in Google Chrome prior to 150.0.7871.46
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106958,7 +106958,7 @@ CVE-2026-14388 (Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106971,7 +106971,7 @@ CVE-2026-14387 (Integer overflow in Skia in Google Chrome prior to 150.0.7871.46
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-2
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -106983,7 +106983,7 @@ CVE-2026-14386 (Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -107007,7 +107007,7 @@ CVE-2026-14382 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108204,7 +108204,7 @@ CVE-2026-13780 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108217,7 +108217,7 @@ CVE-2026-13781 (Insufficient validation of untrusted input in Skia in Google Chr
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-1
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108438,7 +108438,7 @@ CVE-2026-13834 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108475,7 +108475,7 @@ CVE-2026-13841 (Integer overflow in Skia in Google Chrome prior to 150.0.7871.47
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-1
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108561,7 +108561,7 @@ CVE-2026-13859 (Inappropriate implementation in ANGLE in Google Chrome prior to
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108641,7 +108641,7 @@ CVE-2026-13877 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -108673,7 +108673,7 @@ CVE-2026-13883 (Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -109035,7 +109035,7 @@ CVE-2026-13971 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.4
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260602~git.3476902+dfsg-1
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -109331,7 +109331,7 @@ CVE-2026-14044 (Use after free in ANGLE in Google Chrome prior to 150.0.7871.47
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -109663,7 +109663,7 @@ CVE-2026-14125 (Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -109779,7 +109779,7 @@ CVE-2026-14152 (Out of bounds read and write in ANGLE in Google Chrome prior to
{DSA-6534-1 DSA-6378-1 DLA-4672-1}
- chromium 150.0.7871.46-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -125951,7 +125951,7 @@ CVE-2026-11663 (Use after free in Skia in Google Chrome prior to 149.0.7827.103
{DSA-6534-1 DSA-6337-1}
- chromium 149.0.7827.102-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -126007,7 +126007,7 @@ CVE-2026-11675 (Out of bounds read in Skia in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6337-1}
- chromium 149.0.7827.102-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127317,7 +127317,7 @@ CVE-2026-10881 (Out of bounds read and write in ANGLE in Google Chrome prior to
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127333,7 +127333,7 @@ CVE-2026-10883 (Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127365,7 +127365,7 @@ CVE-2026-10889 (Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127445,7 +127445,7 @@ CVE-2026-10907 (Out of bounds write in ANGLE in Google Chrome prior to 149.0.782
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127501,7 +127501,7 @@ CVE-2026-10919 (Use after free in ANGLE in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127597,7 +127597,7 @@ CVE-2026-10941 (Out of bounds memory access in Skia in Google Chrome prior to 14
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127737,7 +127737,7 @@ CVE-2026-10974 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127757,7 +127757,7 @@ CVE-2026-10977 (Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.5
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127773,7 +127773,7 @@ CVE-2026-10979 (Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127805,7 +127805,7 @@ CVE-2026-10985 (Out of bounds read in Skia in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127845,7 +127845,7 @@ CVE-2026-10993 (Heap buffer overflow in Skia in Google Chrome prior to 149.0.782
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127857,7 +127857,7 @@ CVE-2026-10994 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127905,7 +127905,7 @@ CVE-2026-11004 (Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -127993,7 +127993,7 @@ CVE-2026-11024 (Stack buffer overflow in Skia in Google Chrome prior to 149.0.78
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128061,7 +128061,7 @@ CVE-2026-11039 (Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.5
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128073,7 +128073,7 @@ CVE-2026-11040 (Use after free in ANGLE in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128125,7 +128125,7 @@ CVE-2026-11051 (Out of bounds read in ANGLE in Google Chrome on Linux prior to 1
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128157,7 +128157,7 @@ CVE-2026-11057 (Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.5
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128181,7 +128181,7 @@ CVE-2026-11061 (Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128205,7 +128205,7 @@ CVE-2026-11065 (Use after free in ANGLE in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128217,7 +128217,7 @@ CVE-2026-11066 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128309,7 +128309,7 @@ CVE-2026-11087 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128321,7 +128321,7 @@ CVE-2026-11088 (Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.5
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128337,7 +128337,7 @@ CVE-2026-11090 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128401,7 +128401,7 @@ CVE-2026-11104 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128429,7 +128429,7 @@ CVE-2026-11109 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128441,7 +128441,7 @@ CVE-2026-11110 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128453,7 +128453,7 @@ CVE-2026-11111 (Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128469,7 +128469,7 @@ CVE-2026-11113 (Insufficient validation of untrusted input in ANGLE in Google Ch
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128509,7 +128509,7 @@ CVE-2026-11121 (Insufficient validation of untrusted input in Skia in Google Chr
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128525,7 +128525,7 @@ CVE-2026-11123 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128537,7 +128537,7 @@ CVE-2026-11124 (Integer overflow in Skia in Google Chrome prior to 149.0.7827.53
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128597,7 +128597,7 @@ CVE-2026-11137 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128609,7 +128609,7 @@ CVE-2026-11138 (Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128701,7 +128701,7 @@ CVE-2026-11159 (Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.5
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -128837,7 +128837,7 @@ CVE-2026-11191 (Out of bounds memory access in ANGLE in Google Chrome prior to 1
{DSA-6534-1 DSA-6325-1}
- chromium 149.0.7827.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132829,7 +132829,7 @@ CVE-2026-9998 (Integer overflow in Skia in Google Chrome prior to 148.0.7778.216
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132898,7 +132898,7 @@ CVE-2026-9983 (Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 a
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132910,7 +132910,7 @@ CVE-2026-9982 (Insufficient validation of untrusted input in ANGLE in Google Chr
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132923,7 +132923,7 @@ CVE-2026-9981 (Inappropriate implementation in Skia in Google Chrome prior to 14
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132955,7 +132955,7 @@ CVE-2026-9975 (Out of bounds read and write in ANGLE in Google Chrome prior to 1
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -132987,7 +132987,7 @@ CVE-2026-9969 (Insufficient validation of untrusted input in ANGLE in Google Chr
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133011,7 +133011,7 @@ CVE-2026-9965 (Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133067,7 +133067,7 @@ CVE-2026-9953 (Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133103,7 +133103,7 @@ CVE-2026-9946 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133119,7 +133119,7 @@ CVE-2026-9944 (Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.2
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133135,7 +133135,7 @@ CVE-2026-9942 (Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.2
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133147,7 +133147,7 @@ CVE-2026-9941 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133159,7 +133159,7 @@ CVE-2026-9940 (Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.777
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133187,7 +133187,7 @@ CVE-2026-9935 (Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.2
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133227,7 +133227,7 @@ CVE-2026-9927 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133239,7 +133239,7 @@ CVE-2026-9926 (Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.777
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133251,7 +133251,7 @@ CVE-2026-9925 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133268,7 +133268,7 @@ CVE-2026-9923 (Use after free in Skia in Google Chrome prior to 148.0.7778.216 a
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133304,7 +133304,7 @@ CVE-2026-9916 (Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133316,7 +133316,7 @@ CVE-2026-9915 (Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.777
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133328,7 +133328,7 @@ CVE-2026-9914 (Insufficient validation of untrusted input in ANGLE in Google Chr
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133340,7 +133340,7 @@ CVE-2026-9913 (Inappropriate implementation in ANGLE in Google Chrome prior to 1
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133356,7 +133356,7 @@ CVE-2026-9911 (Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.21
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133368,7 +133368,7 @@ CVE-2026-9910 (Out of bounds memory access in ANGLE in Google Chrome prior to 14
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133381,7 +133381,7 @@ CVE-2026-9909 (Integer overflow in Skia in Google Chrome prior to 148.0.7778.216
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133393,7 +133393,7 @@ CVE-2026-9908 (Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133417,7 +133417,7 @@ CVE-2026-9904 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133437,7 +133437,7 @@ CVE-2026-9901 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133449,7 +133449,7 @@ CVE-2026-9900 (Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133461,7 +133461,7 @@ CVE-2026-9899 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133494,7 +133494,7 @@ CVE-2026-9893 (Use after free in Skia in Google Chrome prior to 148.0.7778.216 a
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133547,7 +133547,7 @@ CVE-2026-9882 (Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.21
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133567,7 +133567,7 @@ CVE-2026-9879 (Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133579,7 +133579,7 @@ CVE-2026-9878 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133591,7 +133591,7 @@ CVE-2026-9877 (Use after free in ANGLE in Google Chrome prior to 148.0.7778.216
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133860,7 +133860,7 @@ CVE-2026-10019 (Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.2
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133872,7 +133872,7 @@ CVE-2026-10018 (Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.2
{DSA-6534-1 DSA-6316-1}
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133905,7 +133905,7 @@ CVE-2026-10012 (Use after free in Skia in Google Chrome prior to 148.0.7778.216
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133918,7 +133918,7 @@ CVE-2026-10011 (Inappropriate implementation in Skia in Google Chrome prior to 1
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -133935,7 +133935,7 @@ CVE-2026-10009 (Integer overflow in Skia in Google Chrome prior to 148.0.7778.21
- chromium 148.0.7778.215-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-5
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -143208,7 +143208,7 @@ CVE-2026-8579 (Insufficient validation of untrusted input in Skia in Google Chro
- chromium 148.0.7778.167-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-4
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150027,7 +150027,7 @@ CVE-2026-7949 (Out of bounds read in Skia in Google Chrome prior to 148.0.7778.9
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150059,7 +150059,7 @@ CVE-2026-7943 (Insufficient validation of untrusted input in ANGLE in Google Chr
{DSA-6534-1 DSA-6250-1}
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150071,7 +150071,7 @@ CVE-2026-7942 (Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96
{DSA-6534-1 DSA-6250-1}
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150152,7 +150152,7 @@ CVE-2026-7923 (Out of bounds write in Skia in Google Chrome prior to 148.0.7778.
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150173,7 +150173,7 @@ CVE-2026-7920 (Use after free in Skia in Google Chrome prior to 148.0.7778.96 al
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-3
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -150261,7 +150261,7 @@ CVE-2026-7900 (Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.777
{DSA-6534-1 DSA-6250-1}
- chromium 148.0.7778.96-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -155519,7 +155519,7 @@ CVE-2026-7359 (Use after free in ANGLE in Google Chrome prior to 147.0.7727.138
{DSA-6534-1 DSA-6239-1}
- chromium 147.0.7727.137-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -155547,7 +155547,7 @@ CVE-2026-7354 (Out of bounds read and write in Angle in Google Chrome prior to 1
{DSA-6534-1 DSA-6239-1}
- chromium 147.0.7727.137-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -155559,7 +155559,7 @@ CVE-2026-7353 (Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727
{DSA-6534-1 DSA-6239-1}
- chromium 147.0.7727.137-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -162531,7 +162531,7 @@ CVE-2026-6364 (Out of bounds read in Skia in Google Chrome prior to 147.0.7727.1
- chromium 147.0.7727.101-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-1 (bug #1134991)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -162652,7 +162652,7 @@ CVE-2026-6298 (Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727
- chromium 147.0.7727.101-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-1 (bug #1134991)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -162668,7 +162668,7 @@ CVE-2026-6296 (Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.772
{DSA-6534-1 DSA-6214-1}
- chromium 147.0.7727.101-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -166042,7 +166042,7 @@ CVE-2026-5870 (Integer overflow in Skia in Google Chrome prior to 147.0.7727.55
- chromium 147.0.7727.55-1
[bullseye] - chromium <end-of-life> (see #1061268)
- libskia 146.20260414~git.ef5f213+dfsg-1 (bug #1134991)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -171663,7 +171663,7 @@ CVE-2026-5283 (Inappropriate implementation in ANGLE in Google Chrome prior to 1
{DSA-6534-1 DSA-6192-1}
- chromium 146.0.7680.177-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -178730,7 +178730,7 @@ CVE-2026-4464 (Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.15
{DSA-6534-1 DSA-6171-1}
- chromium 146.0.7680.153-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -178754,7 +178754,7 @@ CVE-2026-4460 (Out of bounds read in Skia in Google Chrome prior to 146.0.7680.1
{DSA-6534-1 DSA-6171-1}
- chromium 146.0.7680.153-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -178810,7 +178810,7 @@ CVE-2026-4448 (Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.768
{DSA-6534-1 DSA-6171-1}
- chromium 146.0.7680.153-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -181427,7 +181427,7 @@ CVE-2026-3909 (Out of bounds write in Skia in Google Chrome prior to 146.0.7680.
{DSA-6534-1 DSA-6165-1}
- chromium 146.0.7680.80-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -182010,7 +182010,7 @@ CVE-2026-3931 (Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680
{DSA-6534-1 DSA-6164-1}
- chromium 146.0.7680.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -186152,7 +186152,7 @@ CVE-2026-3538 (Integer overflow in Skia in Google Chrome prior to 145.0.7632.159
{DSA-6534-1 DSA-6157-1}
- chromium 145.0.7632.159-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -186168,7 +186168,7 @@ CVE-2026-3536 (Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.15
{DSA-6534-1 DSA-6157-1}
- chromium 145.0.7632.159-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -206576,7 +206576,7 @@ CVE-2026-0908 (Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 a
{DSA-6534-1 DSA-6100-1}
- chromium 144.0.7559.59-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -224412,7 +224412,7 @@ CVE-2025-48623 (In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of boun
NOT-FOR-US: Android
CVE-2025-48622 (In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bou ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -251066,7 +251066,7 @@ CVE-2025-10502 (Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.73
{DSA-6534-1 DSA-6004-1}
- chromium 140.0.7339.185-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -256593,7 +256593,7 @@ CVE-2025-32320 (In System UI, there is a possible way to view other users' image
CVE-2025-32318 (In Skia, there is a possible out of bounds write due to a heap buffer ...)
{DSA-6534-1}
- libskia <not-affected> (Fixed before first version packaged in Debian)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -258085,7 +258085,7 @@ CVE-2025-54588 (Envoy is an open source L7 proxy and communication bus designed
- envoyproxy <itp> (bug #987544)
CVE-2025-26416 (In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible o ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -259921,7 +259921,7 @@ CVE-2025-9478 (Use after free in ANGLE in Google Chrome prior to 139.0.7258.154
{DSA-6534-1 DSA-5988-1}
- chromium 139.0.7258.154-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -264699,7 +264699,7 @@ CVE-2025-8901 (Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258
{DSA-6534-1 DSA-5976-1}
- chromium 139.0.7258.127-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -266552,7 +266552,7 @@ CVE-2025-54628 (Vulnerability of incomplete verification information in the comm
NOT-FOR-US: Huawei
CVE-2025-54627 (Out-of-bounds write vulnerability in the skia module. Impact: Successf ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -326247,7 +326247,7 @@ CVE-2025-0444 (Use after free in Skia in Google Chrome prior to 133.0.6943.53 al
{DSA-6534-1 DSA-5859-1}
- chromium 133.0.6943.53-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -332242,7 +332242,7 @@ CVE-2025-0436 (Integer overflow in Skia in Google Chrome prior to 132.0.6834.83
{DSA-6534-1 DSA-5844-1}
- chromium 132.0.6834.83-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -336373,7 +336373,7 @@ CVE-2024-43769 (In isPackageDeviceAdmin of PackageManagerService.java, there is
CVE-2024-43768 (In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds ...)
{DSA-6534-1}
- libskia <not-affected> (Fixed before initial upload to the archive)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -336387,7 +336387,7 @@ CVE-2024-43768 (In skia_alloc_func of SkDeflate.cpp, there is a possible out of
CVE-2024-43767 (In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a p ...)
{DSA-6534-1}
- libskia <not-affected> (Fixed before initial upload to the archive)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -336406,7 +336406,7 @@ CVE-2024-43097 (In resizeToAtLeast of SkRegion.cpp, there is a possible out of b
{DSA-6534-1 DSA-5876-1 DSA-5874-1 DLA-4081-1 DLA-4078-1}
- firefox-esr 128.8.0esr-1
- thunderbird 1:128.8.0esr-1
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -350415,7 +350415,7 @@ CVE-2024-43093 (In shouldHideDocument of ExternalStorageProvider.java, there is
NOT-FOR-US: Android
CVE-2024-43091 (In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bo ...)
{DSA-6534-1}
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -365030,7 +365030,7 @@ CVE-2024-9123 (Integer overflow in Skia in Google Chrome prior to 129.0.6668.70
{DSA-6534-1 DSA-5775-1}
- chromium 129.0.6668.70-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -367894,7 +367894,7 @@ CVE-2024-8636 (Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613
{DSA-6534-1 DSA-5768-1}
- chromium 128.0.6613.137-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -370475,7 +370475,7 @@ CVE-2024-8198 (Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613
{DSA-6534-1 DSA-5761-1}
- chromium 128.0.6613.113-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -370491,7 +370491,7 @@ CVE-2024-8193 (Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613
{DSA-6534-1 DSA-5761-1}
- chromium 128.0.6613.113-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -372019,7 +372019,7 @@ CVE-2024-7966 (Out of bounds memory access in Skia in Google Chrome prior to 128
{DSA-6534-1 DSA-5757-1}
- chromium 128.0.6613.84-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
@@ -431308,7 +431308,7 @@ CVE-2024-1283 (Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167
- chromium 121.0.6167.160-1
[bullseye] - chromium <end-of-life> (see #1061268)
[buster] - chromium <end-of-life> (see DSA 5046)
- - webkit2gtk <unfixed>
+ - webkit2gtk 2.54.0-1
[bookworm] - webkit2gtk <end-of-life> (see DSA-6232-1)
[bullseye] - webkit2gtk <end-of-life> (EOL in bullseye)
- wpewebkit 2.54.0-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ccdb8309f4c47c37118ad0ad75a729f15f26b5c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ccdb8309f4c47c37118ad0ad75a729f15f26b5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/49b3367d/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list