[Git][security-tracker-team/security-tracker][master] track libskia issues from latest Chromium release

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Sep 1 08:39:13 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5c851c4 by Moritz Muehlenhoff at 2026-09-01T09:39:04+02:00
track libskia issues from latest Chromium release

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5547,6 +5547,7 @@ CVE-2026-79148 (Off-by-one error in DevTools in Google Chrome prior to 152.0.797
 CVE-2026-79147 (Information leak in Skia in Google Chrome prior to 152.0.7977.65 allow ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
+	- libskia <unfixed>
 CVE-2026-79146 (Information leak in CustomTabs in Google Chrome on on Android prior to ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
@@ -5637,6 +5638,7 @@ CVE-2026-79116 (Missing authorization in Viz in Google Chrome prior to 152.0.797
 CVE-2026-79112 (Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 all ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
+	- libskia <unfixed>
 CVE-2026-79111 (Improper input validation in Dawn in Google Chrome prior to 152.0.7977 ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
@@ -6015,6 +6017,7 @@ CVE-2026-78959 (Improper handling of case sensitivity in FileSystem in Google Ch
 CVE-2026-78958 (Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
+	- libskia <unfixed>
 CVE-2026-78957 (Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7 ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
@@ -6093,6 +6096,7 @@ CVE-2026-78915 (Race condition in Enterprise in Google Chrome on on Windows prio
 CVE-2026-78914 (Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)
+	- libskia <unfixed>
 CVE-2026-78913 (Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 a ...)
 	- chromium 152.0.7977.64-1
 	[bullseye] - chromium <end-of-life> (see #1061268)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5c851c4384e7921c265a0c602d3c777f422ea5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5c851c4384e7921c265a0c602d3c777f422ea5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260901/01d1caf5/attachment.htm>


More information about the debian-security-tracker-commits mailing list