[Git][security-tracker-team/security-tracker][master] Track fixes for libskia issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Sep 5 09:37:38 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
83d432d2 by Salvatore Bonaccorso at 2026-09-05T10:37:01+02:00
Track fixes for libskia issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1668,7 +1668,7 @@ CVE-2026-85050 (Out of bounds write in WebGL in Google Chrome on on Android prio
- chromium 152.0.7977.82-1
CVE-2026-85049 (Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed ...)
- chromium 152.0.7977.82-1
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-85048 (Use after free in Compositing in Google Chrome prior to 152.0.7977.82 ...)
- chromium 152.0.7977.82-1
CVE-2026-85047 (Improper input validation in Transactions Platform in Google Chrome on ...)
@@ -3825,7 +3825,7 @@ CVE-2026-84354 (Incorrect authorization in FileSystem in Google Chrome prior to
CVE-2026-84359 (Information leak in Skia in Google Chrome prior to 152.0.7977.75 allow ...)
{DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.75-1
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-84357 (Improper input validation in Omnibox in Google Chrome prior to 152.0.7 ...)
{DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.75-1
@@ -10505,7 +10505,7 @@ CVE-2026-79144 (Information leak in Skia in Google Chrome prior to 152.0.7977.65
{DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-79143 (Incorrect authorization in FileSystem in Google Chrome prior to 152.0. ...)
{DSA-6482-1 DLA-4771-1}
- chromium 152.0.7977.64-1
@@ -19846,7 +19846,7 @@ CVE-2026-76041 (Information leak in Skia in Google Chrome prior to 151.0.7922.16
{DSA-6455-1 DLA-4749-1}
- chromium 151.0.7922.169-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-76047 (Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed ...)
{DSA-6455-1 DLA-4749-1}
- chromium 151.0.7922.169-1
@@ -36804,7 +36804,7 @@ CVE-2026-19154 (Use after free in Skia in Google Chrome on Android prior to 151.
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-19157 (Out of bounds write in ANGLE in Google Chrome on Android prior to 151. ...)
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
@@ -36905,12 +36905,12 @@ CVE-2026-19160 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.1
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-19161 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 all ...)
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-19162 (Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 all ...)
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
@@ -36956,7 +36956,7 @@ CVE-2026-19176 (Use after free in Skia in Google Chrome prior to 151.0.7922.109
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-19177 (Insufficient validation of untrusted input in UI in Google Chrome prio ...)
{DSA-6422-1 DLA-4728-1}
- chromium 151.0.7922.108-1
@@ -42057,7 +42057,7 @@ CVE-2026-17992 (Uninitialized Use in Skia in Google Chrome on Windows prior to 1
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17991 (Insufficient validation of untrusted input in AI in Google Chrome prio ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -42370,7 +42370,7 @@ CVE-2026-17914 (Side-channel information leakage in Skia in Google Chrome prior
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17913 (Inappropriate implementation in Chrome for iOS in Google Chrome on iOS ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -43000,7 +43000,7 @@ CVE-2026-17757 (Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.7
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17756 (Insufficient policy enforcement in Presentation in Google Chrome prior ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -43049,7 +43049,7 @@ CVE-2026-17745 (Out of bounds read in Skia in Google Chrome prior to 151.0.7922.
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17744 (Inappropriate implementation in File Input in Google Chrome on Linux p ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -43182,7 +43182,7 @@ CVE-2026-17712 (Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allo
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17711 (Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allow ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -43223,7 +43223,7 @@ CVE-2026-17702 (Inappropriate implementation in Skia in Google Chrome prior to 1
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17701 (Insufficient validation of untrusted input in ANGLE in Google Chrome o ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -43420,7 +43420,7 @@ CVE-2026-17653 (Use after free in Skia in Google Chrome prior to 151.0.7922.72 a
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-17652 (Use after free in Views in Google Chrome prior to 151.0.7922.72 allowe ...)
{DSA-6408-1 DLA-4710-1}
- chromium 151.0.7922.71-1
@@ -52527,7 +52527,7 @@ CVE-2026-16417 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.1
{DSA-6396-1 DLA-4701-1}
- chromium 150.0.7871.181-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-16418 (Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 a ...)
{DSA-6396-1 DLA-4701-1}
- chromium 150.0.7871.181-1
@@ -60511,7 +60511,7 @@ CVE-2026-15774 (Use after free in Skia in Google Chrome prior to 150.0.7871.125
{DSA-6390-1 DLA-4687-1}
- chromium 150.0.7871.124-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-15773 (Use after free in Core in Google Chrome on Windows prior to 150.0.7871 ...)
{DSA-6390-1 DLA-4687-1}
- chromium 150.0.7871.124-1
@@ -60544,7 +60544,7 @@ CVE-2026-15766 (Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.1
{DSA-6390-1 DLA-4687-1}
- chromium 150.0.7871.124-1
[bullseye] - chromium <end-of-life> (see #1061268)
- - libskia <unfixed>
+ - libskia 146.20260602~git.3476902+dfsg-4
CVE-2026-15765 (Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allow ...)
{DSA-6390-1 DLA-4687-1}
- chromium 150.0.7871.124-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83d432d25c2eb534bfdc5a757183bec428027381
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83d432d25c2eb534bfdc5a757183bec428027381
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260905/b12ea152/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list