[Git][security-tracker-team/security-tracker][master] track some chromium issues also for libskia

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff75eda3 by Moritz Muehlenhoff at 2026-10-12T09:25:31+02:00
track some chromium issues also for libskia

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5336,6 +5336,8 @@ CVE-2026-106400 (Clickjacking in Messages in Google Chrome on on Android prior t
 	- chromium 155.0.8059.39-1
 CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 all ...)
 	- chromium 155.0.8059.39-1
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to 155.0.8059. ...)
 	- chromium 155.0.8059.39-1
 CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS prior to  ...)
@@ -5376,6 +5378,8 @@ CVE-2026-106380 (UI misrepresentation in UI in Google Chrome prior to 155.0.8059
 	- chromium 155.0.8059.39-1
 CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 ...)
 	- chromium 155.0.8059.39-1
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155 ...)
 	- chromium 155.0.8059.39-1
 CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowe ...)
@@ -9073,6 +9077,8 @@ CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to 154.0.8037.97
 	- chromium 155.0.8059.39-1
 CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allow ...)
 	- chromium 155.0.8059.39-1
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 a ...)
 	- chromium 155.0.8059.39-1
 CVE-2026-103627 (Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowe ...)
@@ -13665,6 +13671,8 @@ CVE-2026-102309 (Use after free in FullScreen in Google Chrome prior to 154.0.80
 CVE-2026-102325 (Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 ...)
 	{DSA-6535-1 DLA-4811-1}
 	- chromium 154.0.8037.92-1
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-102308 (Use after free in Views in Google Chrome prior to 154.0.8037.92 allowe ...)
 	{DSA-6535-1 DLA-4811-1}
 	- chromium 154.0.8037.92-1
@@ -26513,6 +26521,8 @@ CVE-2026-93393 (A heap-based buffer overflow exists in the TLS transport layer o
 CVE-2026-93387 (Improper state validation in Skia in Google Chrome prior to 153.0.8010 ...)
 	{DSA-6508-1 DLA-4790-1}
 	- chromium 153.0.8010.52-1
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-93386 (UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0 ...)
 	{DSA-6508-1 DLA-4790-1}
 	- chromium 153.0.8010.52-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff75eda39cce13a8dd5719ccd52eac57165b3ca6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff75eda39cce13a8dd5719ccd52eac57165b3ca6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/13f59bef/attachment.htm>