[Git][security-tracker-team/security-tracker][master] map some chromium issues to skia as well

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1eff26fe by Moritz Muehlenhoff at 2026-10-28T16:37:15+01:00
map some chromium issues to skia as well

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -132,18 +132,24 @@ CVE-2026-118355 (Improper input validation in Command in Google Chrome prior to
 	- chromium <unfixed>
 CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
 	- chromium <unfixed>
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-118353 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
 	- chromium <unfixed>
 CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 all ...)
 	- chromium <unfixed>
 CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
 	- chromium <unfixed>
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 all ...)
 	- chromium <unfixed>
 CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to 156.0.8078.73  ...)
 	- chromium <unfixed>
 CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
 	- chromium <unfixed>
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
 	- chromium <unfixed>
 CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to 156.0.8078.73  ...)
@@ -160,6 +166,8 @@ CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to 156.
 	- chromium <unfixed>
 CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
 	- chromium <unfixed>
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-118339 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
 	- chromium <unfixed>
 CVE-2026-118338 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
@@ -194,6 +202,8 @@ CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73
 	- chromium <unfixed>
 CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
 	- chromium <unfixed>
+	- libskia <unfixed> (unimportant)
+	NOTE: skia not covered by security support
 CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to 156.0.8078.73  ...)
 	- chromium <unfixed>
 CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1eff26fe375bac5cfbf9b837111f838967495dad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1eff26fe375bac5cfbf9b837111f838967495dad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/96a824ec/attachment-0001.htm>