-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 03:47:05 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 154.0.8037.92-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (154.0.8037.92-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx. - CVE-2026-102317: Improper privilege management in Mojo. Reported by Google. - CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga. - CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google. - CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni. - CVE-2026-102306: Use after free in Bluetooth. Reported by Google. - CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google. - CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102303: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102311: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security). - CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey. - CVE-2026-102325: Uninitialized resource in Skia. Reported by Google. - CVE-2026-102308: Use after free in Views. Reported by Google. - CVE-2026-102301: Out of bounds write in GPU. Reported by Google. - CVE-2026-102319: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt. - CVE-2026-102318: Out of bounds read in WebGL. Reported by Google. - CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec. - CVE-2026-102315: Uninitialized resource in Media. Reported by Google. - CVE-2026-102302: Buffer overflow in V8. Reported by Google. - CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint. - CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous. - CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact. - CVE-2026-102327: Incorrect authorization in WebView. Reported by Google. - CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google. - CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google. - CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google. * d/patches: - disable/omnibox-ai-mode.patch: add patch that *actually* removes the AI Mode button from the new tab page's omnibox. Checksums-Sha1: cf287fbc4bc87ad2ca3ba964927d107e92658e02 3102432 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb f7203359f5d478aecbfd9aca873f63b891b86685 35586904 chromium-common_154.0.8037.92-1~deb13u1_arm64.deb 20e052ae58a6b210a9e26012574f25568ebe7968 33952732 chromium-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 6ca266ba7004111580a8f4526f89a98693e3c27d 7426964 chromium-driver_154.0.8037.92-1~deb13u1_arm64.deb 9b6c571b9fb8e1d025a14a326ed5ec1dae1c8fea 27553600 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb ce3fedd8853bae98c6df4b81cc1113df87d87c05 58124200 chromium-headless-shell_154.0.8037.92-1~deb13u1_arm64.deb 0a315a1de64472e9da083a3a14c9d102e8780a23 20960 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 92e0494e43502c5f63f83dd68a03d9ebb08d1caf 152192 chromium-sandbox_154.0.8037.92-1~deb13u1_arm64.deb b2016a301d227e412d0e180203a244bf3120eb69 29026064 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 620d592f8ea3daf6f411096630a405d6cc5ac9d2 58000388 chromium-shell_154.0.8037.92-1~deb13u1_arm64.deb aec7c32c80d6d6a2046d752bc9e82499be8f6bfb 31509 chromium_154.0.8037.92-1~deb13u1_arm64-buildd.buildinfo bfaa7407b29d945557a0fe9efaad6daf38ba5d0f 78725632 chromium_154.0.8037.92-1~deb13u1_arm64.deb Checksums-Sha256: e31d3d24af351f0673fb74256ce7ebbd428c1e70bd96bb6222c2454fb0b8663f 3102432 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb c635385e9a7dd059f003b703046a1937baa34d381b8989345a412414847f3b6f 35586904 chromium-common_154.0.8037.92-1~deb13u1_arm64.deb ca1bb6aed7d11e8e8c9f079cc95a2ed1810829a525f01bdd4ec7eea802e4fbf6 33952732 chromium-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 62e44d175223d834509b0dc2cdd9be7419ff9e4fe09717afa905bb11ad618472 7426964 chromium-driver_154.0.8037.92-1~deb13u1_arm64.deb 26fe564a46ae33b0b641d37d0c9dceaad105d62c211341ec988465bc5ed8dd13 27553600 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb cee6c02e065cfb43b7de0b6e7c903e95ad4b669387075b56c423cc909925a794 58124200 chromium-headless-shell_154.0.8037.92-1~deb13u1_arm64.deb 2b85627fcfec659b0d780d223a98d8ca5dfe9f1ad80bd3fcef59fbf7c3dc5570 20960 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 35eb4a08ad3b7a8aa71c77a0abd556bd0458c782d075ef2b69c6a22dba940552 152192 chromium-sandbox_154.0.8037.92-1~deb13u1_arm64.deb 2601595e17fc64af794ee71f9ef6304d0d21ca5b6071421ae815a866f022ce65 29026064 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb cb9b486b49d20d10d098a60ee8c17384436c797b2ef129fc1d436ca4c605b76a 58000388 chromium-shell_154.0.8037.92-1~deb13u1_arm64.deb dcbf1b49cd36e0fdc367169182436a9ed55584eefa430fa9d80db9ea3d047c66 31509 chromium_154.0.8037.92-1~deb13u1_arm64-buildd.buildinfo 5d000181580f6673b2889a99811ca8de973b76872fc591f379546fd85a2c6a93 78725632 chromium_154.0.8037.92-1~deb13u1_arm64.deb Files: f5a0c6589f19255ce0f616c983310351 3102432 debug optional chromium-common-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 7da7898b865330fe0ff7777314843997 35586904 web optional chromium-common_154.0.8037.92-1~deb13u1_arm64.deb e77cf695fb51b8702dbfe4f74f40ce95 33952732 debug optional chromium-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 0c4f432f8c52d1c00db8e914cf09ad64 7426964 web optional chromium-driver_154.0.8037.92-1~deb13u1_arm64.deb dca8583fb48b7cc7793779cddb25f95a 27553600 debug optional chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 9a2b6fb36cfabf98ed3386ff20715184 58124200 web optional chromium-headless-shell_154.0.8037.92-1~deb13u1_arm64.deb f359a2fa5964c91d443baf656e0a1cd4 20960 debug optional chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 20ca19123753df146ad2143a3962246b 152192 web optional chromium-sandbox_154.0.8037.92-1~deb13u1_arm64.deb af2e05818f046bfd727a975af60cea75 29026064 debug optional chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_arm64.deb 90413ae50740757ce4f93f4678073c8e 58000388 web optional chromium-shell_154.0.8037.92-1~deb13u1_arm64.deb 5cbd17f7b0889dddcead450790244786 31509 web optional chromium_154.0.8037.92-1~deb13u1_arm64-buildd.buildinfo 66b0edd026ae4ee3145a6a8096f2f728 78725632 web optional chromium_154.0.8037.92-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmq/DVMACgkQG5VHrWJm wgcJtRAAxPLElE0Pw0mnDjltkzfPG106Z9Y/Wfxcf6A7jKONIgcDBlagijH0SHQY 68MzQ4ADCp72A+tJY95sG5bgILwhfd1gprPG1h+QfCxo7YoUMQSqkpH2NO5l3Nrj YfQ/7cZzeprT8DAIufXCQ4O2wwsMY/26tvgL/rPjUJ5qWMtmpMoiF0EJrBPAQYVk cXY3j2k0sBn/8zyN3i04XQuDKitE2ahAQ5DoIsJje1phzqy1hElxziTtXaz9D7lS RziIJbR36vm1G+T+JqBRgBZQiu+k7badR7pjxmpciLkYL3i5oz44AiXmYIpTsaAw X7ocLzKAswr2ZCmf/jRFw33i++4KzB1H+9s+dzFSPgmyQHEafyurg9cORfNbic5q o7mihvk8UL+Rcu3lKY+qfQGGImPFKN6/4NkY+tu8PsQsb7ocm4ZRhYMmgb8C0AMI l9uu2V4q+kp7T6Ky6uwEGnpolf5kho0IIW9hf+mrGH9uy0+e8ONUQJp6rudBOR3p pB7Izo1h1vSmy/BB6KRlIes/v1/PGwKQs9ZITQdJDMowBkAcCQN7A5NBgcm3lScT s+1PVZnlEgG/4+WiWTP+jewnaoUCDqjPtvr3vq9X1Oa53WWAxLUz9vrJy0iXjwzu JEoFzpqNv6ndu2kqmcdU1CuH8mOr+fBDg2q0dHN3QIxabxuir9c= =eS6h -----END PGP SIGNATURE-----