-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 01:45:42 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 150.0.7871.114-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (150.0.7871.114-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-15112: Use after free in Ozone. Reported by Google. - CVE-2026-15129: Use after free in Views. Reported by Google. - CVE-2026-15132: Uninitialized Use in V8. Reported by Pierre Langlois from Arm. - CVE-2026-15133: Use after free in InterestGroups. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-15108: Integer overflow in Extensions API. Reported by Google. - CVE-2026-15109: Uninitialized Use in ANGLE. Reported by Google. - CVE-2026-15110: Use after free in Extensions. Reported by Google. - CVE-2026-15111: Use after free in Views. Reported by Google. - CVE-2026-15113: Use after free in Autofill. Reported by Google. - CVE-2026-15114: Out of bounds read and write in Codecs. Reported by Google. - CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google. - CVE-2026-15116: Use after free in Actor. Reported by Google. - CVE-2026-15117: Use after free in Payments. Reported by Google. - CVE-2026-15118: Use after free in Input. Reported by Google. - CVE-2026-15119: Inappropriate implementation in GetUserMedia. Reported by Google. - CVE-2026-15120: Use after free in Core. Reported by Google. - CVE-2026-15121: Use after free in WebRTC. Reported by Google. - CVE-2026-15122: Insufficient validation of untrusted input in Codecs. Reported by Google. - CVE-2026-15123: Insufficient data validation in DOM. Reported by Google - CVE-2026-15124: Insufficient policy enforcement in Passwords. Reported by Google. - CVE-2026-15125: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15126: Use after free in Forms. Reported by Google. - CVE-2026-15127: Inappropriate implementation in WebGL. Reported by Google. - CVE-2026-15128: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15130: Insufficient policy enforcement in Navigation. Reported by Google. - CVE-2026-15107: Use after free in IndexedDB. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2026-15131: Insufficient data validation in Navigation. Reported by Google. Checksums-Sha1: a3fb370b59ee4460d250c21aec69cbe6aa943bf9 6153480 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb fc536e8efaedaebe506813ba24dbd9adf760971b 31185920 chromium-common_150.0.7871.114-1~deb13u1_arm64.deb fbab3424dd636c0eadbd70b961aeadbe1396a82b 35403268 chromium-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 2d2f0503aa5c72e2d103cbb2bba6004f7d610f8b 7042452 chromium-driver_150.0.7871.114-1~deb13u1_arm64.deb af4b2d0cd69dfdf0ed463bd94b4f5f24a5096cfb 29470296 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 7ab3a942cc3507ae698263fe25475cc1a264cebf 56032704 chromium-headless-shell_150.0.7871.114-1~deb13u1_arm64.deb f4c60bd4bec5e490bacb65298138034721be4950 21056 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb e5846fd26e48453e808a52cca6df4a7101855d30 132484 chromium-sandbox_150.0.7871.114-1~deb13u1_arm64.deb db50ecfb4b0c8596f32436aebfde1b7f7f886021 31015560 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb b6c5dbd801512d4d6bf97458d6f0859ea67cf9eb 56116320 chromium-shell_150.0.7871.114-1~deb13u1_arm64.deb 03f2333d25f0fa5b528d780b5d90a45be5ecac2d 30782 chromium_150.0.7871.114-1~deb13u1_arm64-buildd.buildinfo 01890c38dd244122896fd97025f3fed7322d1106 75070540 chromium_150.0.7871.114-1~deb13u1_arm64.deb Checksums-Sha256: e192f960b3b8010b8fca2e3362d20d2a0802ffaa847942dde020b6f56d24ce83 6153480 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb c1f082133ccebfd34e6d99cf807f6c3e7fbc859379fdbdad46e9cab75db015e5 31185920 chromium-common_150.0.7871.114-1~deb13u1_arm64.deb a8987dd49303d19290ae0c51d4427af5ef5a99ddbfd01e280893031b2f7dc280 35403268 chromium-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb c334eca8b72179ce6141c92c38ae3e3e8f97d32d18092e2a2b13e034948ec2a4 7042452 chromium-driver_150.0.7871.114-1~deb13u1_arm64.deb ddffe95bce0178f6d910354c145c7154d0cd96eb80d5b445f7ebd0a3d3e19622 29470296 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 354585616e5fb5489d3cf5459426d6388bb5c2196a46bbd6d706d4ed8073d74b 56032704 chromium-headless-shell_150.0.7871.114-1~deb13u1_arm64.deb 7c9da641c702e1ac66b2f6c77112f83b81edd2611503eb9cad289ffc8c58a04f 21056 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 3959f54e89f60f8ec092da2d695142c5ddd6515a874eec23f039586833c34536 132484 chromium-sandbox_150.0.7871.114-1~deb13u1_arm64.deb 17d11caf32b820e67e3de88041f6f8eca68b31039af6d7825369b6526297d71b 31015560 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb d3cf3588905176bce51c1d6100bf3a59ff096c064d7b4891ef7df53a31726d1e 56116320 chromium-shell_150.0.7871.114-1~deb13u1_arm64.deb 81e0d7a65ccefdf41240c2c921b4bd59f022c5d4f0554bf6fa92a21f5a769e4b 30782 chromium_150.0.7871.114-1~deb13u1_arm64-buildd.buildinfo 205ec84e00a0dc2e6e5b0e31e89883d2864b60939f5fd4e82176b41e20657db4 75070540 chromium_150.0.7871.114-1~deb13u1_arm64.deb Files: d498f853f22d3084a0022dab9f8bc6ad 6153480 debug optional chromium-common-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb d3353e634d8412bf956e001e58d63cc4 31185920 web optional chromium-common_150.0.7871.114-1~deb13u1_arm64.deb 458ff3a265e3a4f2701783d494fe77a3 35403268 debug optional chromium-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 074e5762531f889ea24683e758204682 7042452 web optional chromium-driver_150.0.7871.114-1~deb13u1_arm64.deb 4c75e71a1a534a7b71a621459888e6a7 29470296 debug optional chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb 9ef633727a770437a7a8213369ab3710 56032704 web optional chromium-headless-shell_150.0.7871.114-1~deb13u1_arm64.deb 898424346fd55a1ce980c0f41b4ee278 21056 debug optional chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb bda339913ae81d3e454e2658449197b5 132484 web optional chromium-sandbox_150.0.7871.114-1~deb13u1_arm64.deb c62f9cc92ac5af38f03bde017159b784 31015560 debug optional chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_arm64.deb f145f4cbf44512aee8aca4aaaca8e0e4 56116320 web optional chromium-shell_150.0.7871.114-1~deb13u1_arm64.deb b16aa658e6d987a8122b2aa1b4385ffc 30782 web optional chromium_150.0.7871.114-1~deb13u1_arm64-buildd.buildinfo cbc943e1e5bb26707e03e78302cb1e0b 75070540 web optional chromium_150.0.7871.114-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmpSCtoACgkQG5VHrWJm wgdB6hAAtquegqNFVywKJ2+fEIZSimFOlXAq9Wt6Sfp1YNEDXOq4bzdsKIQalKX3 uZKZuwLrVDExfKkO4vvFNNMlG16LnxZnzNdOKqvSF3uKjenhqfS8bvEUWb85Eb0r jgkWko0xKm4F27tTqSfP+59iFO3+vTkUzbqP6FEOLn8S7vpOobYBtTo4yFh73j2v qMzS/Xy7c6D4c7QTv+++g1zUYlv6RMpW/bRb3GRBWbNLiRY0QF6rgtNJns1+Yg0/ JbS+GOp1CzWh4Chj6K4cM/YPg8D79yetVM9lMYeLOSuLXn93jSF/uWX0bxH/ZZRD kedfW+5H4xLSgVf5w3HKQ1GViXEXX05O0RanuWhu4WcBqf2q+r8PUOT6lXbJUQ7d 37cxQhvky3S2Yb9/7qeDuFv9AqNK4C0fzePofJ3pjrV3V4bETJiMlvBnqRI1ZgNf 6yQqPDpntxiPfWze6iOApVPm38ILNXwd95UmPxhC/iY+n95lpXW3z4Qq4VltU9yq 8Vqq17GUtRxEknEZY0IgXEF+ruk0lkTZgaDLrouDgbrmG9b/X3rssnp/PvvxZAe3 Tml6NmBfswva/7HPi/85FRhBehFzmXiDjBYJgE8hGGwC+w99fp/EpCWJX/c5aQNe UXLZhO2iCXkqHw4TmVx0TzxZcLGo14dA1Qhs/mlWMV8z4adO0IY= =JYNC -----END PGP SIGNATURE-----