Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
0e5bfdfd by Salvatore Bonaccorso at 2026-07-15T19:54:10+02:00
Add new chromium issues

- - - - -
e912dd16 by Salvatore Bonaccorso at 2026-07-15T19:54:51+02:00
Add chromium to dsa-needed list

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1662,35 +1662,50 @@ CVE-2026-23573 (An Improper Neutralization of Input 
During Web Page Generation (
 CVE-2026-21840 (HCL BigFix Platform is affected by a user enumeration 
vulnerability wh ...)
        NOT-FOR-US: HCL
 CVE-2026-15778 (Insufficient validation of untrusted input in Navigation in 
Google Chr ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15777 (Use after free in UI in Google Chrome on Linux prior to 
150.0.7871.125 ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15776 (Inappropriate implementation in V8 in Google Chrome prior to 
150.0.787 ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15775 (Inappropriate implementation in V8 in Google Chrome prior to 
150.0.787 ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15774 (Use after free in Skia in Google Chrome prior to 
150.0.7871.125 allowe ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15773 (Use after free in Core in Google Chrome on Windows prior to 
150.0.7871 ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15772 (Use after free in GPU in Google Chrome on Android prior to 
150.0.7871. ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15771 (Insufficient validation of untrusted input in Media in Google 
Chrome o ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15770 (Uninitialized Use in V8 in Google Chrome prior to 
150.0.7871.125 allow ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15769 (Insufficient validation of untrusted input in Linux Toolkit 
Theming in ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15768 (Insufficient policy enforcement in HTML-in-Canvas in Google 
Chrome pri ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15767 (Heap buffer overflow in libyuv in Google Chrome on Windows 
prior to 15 ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15766 (Uninitialized Use in Skia in Google Chrome prior to 
150.0.7871.125 all ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15765 (Use after free in Ozone in Google Chrome prior to 
150.0.7871.125 allow ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15764 (Use after free in Ozone in Google Chrome on Linux prior to 
150.0.7871. ...)
-       TODO: check
+       - chromium <unfixed>
+       [bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2026-15757 (A security flaw was discovered in the NETGEAR DGND3700v1 that 
could al ...)
        NOT-FOR-US: Netgear
 CVE-2026-15753 (A vulnerability was determined in zhinianboke 
xianyu-auto-reply on Ser ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -29,6 +29,8 @@ cacti
 --
 caddy
 --
+chromium (dilinger)
+--
 cockpit
 --
 containerd



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4fbd105020c07e43e3710ff2b041ee64a58655fe...e912dd16adea7f91bf214f37fe3de19699668b91

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4fbd105020c07e43e3710ff2b041ee64a58655fe...e912dd16adea7f91bf214f37fe3de19699668b91
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to