-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 148.0.7778.178-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 16ca96c1d0042214cfb5c14523572cd2aab55e98 5777264 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb bfd378f2e30bfadf213382ab16f2d7eba8009d4a 25456312 chromium-common_148.0.7778.178-1~deb13u1_armhf.deb a34bb24b50bc03affc1c9be2109cc63f3f5fe710 35371464 chromium-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 54c0c6fc80af3bb7bac534ea8a4f04e7bbdbf64f 7212140 chromium-driver_148.0.7778.178-1~deb13u1_armhf.deb 80cc133d8c4300f83f6bb5011236626215716583 27531688 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 99024c6e276f58f265cd3d5347dda2e0fb01f0e6 54409644 chromium-headless-shell_148.0.7778.178-1~deb13u1_armhf.deb 475d49518d4b87240d35580e1bcf1850f984f200 19268 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 2da488ae4a93877519fd602cd1e46158fe5677aa 117620 chromium-sandbox_148.0.7778.178-1~deb13u1_armhf.deb 0e5725bf311f52769dedf3d8565eccae1f04841c 29910164 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb cb0d5f313bc5f48aa94bd39a0324fc5bf5ffd105 59713188 chromium-shell_148.0.7778.178-1~deb13u1_armhf.deb 71b74d6a517809a1d0079a096d95b2861186a649 30555 chromium_148.0.7778.178-1~deb13u1_armhf-buildd.buildinfo 0cbdddf448aec60d81396c5000fa38c64cbfbe80 71487556 chromium_148.0.7778.178-1~deb13u1_armhf.deb Checksums-Sha256: 869047b526cb21cead845c46bd870b5a18b67bed69bc46521b17d48bfd521c7f 5777264 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 8011cbb03cceaf03b44b6fe13c61c69667856702447d6b8ef165d6e7f76aa698 25456312 chromium-common_148.0.7778.178-1~deb13u1_armhf.deb d8677beed1f62cb9f128444a03162a34e160ea5702f2acb5dbbb6532f2035062 35371464 chromium-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 9a0cbf8a41ce60006f6c83aeb40a2e3af9816f5869b3763505cb425998bc6d60 7212140 chromium-driver_148.0.7778.178-1~deb13u1_armhf.deb 9d2b234ccaef85fbc803b12847aec4dab0c3761617d12c10ccecfd4dc16df6e5 27531688 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb fb0e53a2f123d9c6c9b19fa49561088483b42fa3a981799ccc9c3fbf2af45ab7 54409644 chromium-headless-shell_148.0.7778.178-1~deb13u1_armhf.deb ba1a916597dd773d9071afeaf48ca067bf97796df1ad036e30e75d89c0b945c2 19268 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb a9e3bcc8999ea7efcb2bc6e8b788f84e810ed03ba6ec34d4bdd07ca6dea81600 117620 chromium-sandbox_148.0.7778.178-1~deb13u1_armhf.deb d457dcf1c2580a934c777509ac2ba41fea3335491dbe6912a04dbe1063f9e76d 29910164 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 8047e9cfa7b4a2a9eb20677ce6ebd4721905e78bf6693d44248d848de6de28aa 59713188 chromium-shell_148.0.7778.178-1~deb13u1_armhf.deb f945b00635f718ed9ed119935cd6348a06561485590080f4b9e626ef9759dfff 30555 chromium_148.0.7778.178-1~deb13u1_armhf-buildd.buildinfo 133173b30517b20382dc1cab7e081829d66d4764bfa7d9b0df93f56637b0103e 71487556 chromium_148.0.7778.178-1~deb13u1_armhf.deb Files: 91c626ba0238fbae24c94b404c39cac2 5777264 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 0d6b2d1ef8644a091fdae47ac4cfeb77 25456312 web optional chromium-common_148.0.7778.178-1~deb13u1_armhf.deb 309a64b51f366b20d562741f392292d2 35371464 debug optional chromium-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 987b0d828332ee952812e35043a2b26c 7212140 web optional chromium-driver_148.0.7778.178-1~deb13u1_armhf.deb f93dea21ec4e2c7cdc0bded7363f3919 27531688 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb abc5e0ccf65d4dddae1246d197737aad 54409644 web optional chromium-headless-shell_148.0.7778.178-1~deb13u1_armhf.deb b11e7a27fa8bc9824bdf65bbc3685622 19268 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb 208a6be3eabf21773cdb60d8ddd4471b 117620 web optional chromium-sandbox_148.0.7778.178-1~deb13u1_armhf.deb b57c1ec3017735897457f63d43515c4b 29910164 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_armhf.deb c64ef6f215f313d6ce165e7995e9b032 59713188 web optional chromium-shell_148.0.7778.178-1~deb13u1_armhf.deb c4dc19dcc5094971b33aa023e90ec54d 30555 web optional chromium_148.0.7778.178-1~deb13u1_armhf-buildd.buildinfo c999bec4c0957ae3d48bdb66f6afec39 71487556 web optional chromium_148.0.7778.178-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmoPANsACgkQG5VHrWJm wgdaCg//YROzNFI72dich96YdPqmRcMVAp6XGLUpbHLtyVpvN0HsmG2iVgnBZx7D L+td4jPbr/9iUzVc6WwFNWvD+KjGEY8p1/ujLIWtlnwWUZ9P8Z6kyGgFIGTQZQ8y ExqSQ3y99JWAB7z8nKPN6xwuRvnnIeMuJicIttF+n//ET6XvOodjkGgtfxCKWwzr O2hQYd82Ft1OmY4tNISEoVwN4wN7Nr2MBXdWbs57COkT48+50i7tR6DSx1SxVxdL Ia22dXp0fOzOO0FDxavxNj2l3mLXTjwHns/ZBeukalbyi+15kpSAo8JwKWuOEsD7 lSvDjokxpfvqhSiZ0ezNw8X/tqnliTa/JKiEmSPStVgrfFXrQ1RcPXORWn/O2xgM qSJJhvMA6aHA6hXk39CUFyoqhk9P31KqAUGjTJfMEisfpElrIuhrbzTykhrCueDl bSTbY78uX0d7an83wxylbzzwH+4oGG9tfWYC+BeBxs0CVc3lWqifIT1pqurvo0dE +P6VfBHnChTuTY//24aX7DBJd0y/Ii/GI4jythtiluCGHnsq2gUP2UkceK7mTjcv cOggNrr6kRMS1r3NRhl7ul2GzlX2RsoUvDTfGS13I635ucKo9loyG2uZVmSQA4IN HnKzW5i2VRqjE3TlJsyCxB9HyRDrw/nk/kGKkSUFSTR1NsHVaUQ= =MLZe -----END PGP SIGNATURE-----