-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 01:45:42 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 150.0.7871.114-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (150.0.7871.114-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-15112: Use after free in Ozone. Reported by Google. - CVE-2026-15129: Use after free in Views. Reported by Google. - CVE-2026-15132: Uninitialized Use in V8. Reported by Pierre Langlois from Arm. - CVE-2026-15133: Use after free in InterestGroups. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-15108: Integer overflow in Extensions API. Reported by Google. - CVE-2026-15109: Uninitialized Use in ANGLE. Reported by Google. - CVE-2026-15110: Use after free in Extensions. Reported by Google. - CVE-2026-15111: Use after free in Views. Reported by Google. - CVE-2026-15113: Use after free in Autofill. Reported by Google. - CVE-2026-15114: Out of bounds read and write in Codecs. Reported by Google. - CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google. - CVE-2026-15116: Use after free in Actor. Reported by Google. - CVE-2026-15117: Use after free in Payments. Reported by Google. - CVE-2026-15118: Use after free in Input. Reported by Google. - CVE-2026-15119: Inappropriate implementation in GetUserMedia. Reported by Google. - CVE-2026-15120: Use after free in Core. Reported by Google. - CVE-2026-15121: Use after free in WebRTC. Reported by Google. - CVE-2026-15122: Insufficient validation of untrusted input in Codecs. Reported by Google. - CVE-2026-15123: Insufficient data validation in DOM. Reported by Google - CVE-2026-15124: Insufficient policy enforcement in Passwords. Reported by Google. - CVE-2026-15125: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15126: Use after free in Forms. Reported by Google. - CVE-2026-15127: Inappropriate implementation in WebGL. Reported by Google. - CVE-2026-15128: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15130: Insufficient policy enforcement in Navigation. Reported by Google. - CVE-2026-15107: Use after free in IndexedDB. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2026-15131: Insufficient data validation in Navigation. Reported by Google. Checksums-Sha1: 2d0b3976e35e3c66cb9cd22222ab232ebf4df3d0 5831504 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 4e477613ad6e132b5debc472386711bb4e2abe24 26399904 chromium-common_150.0.7871.114-1~deb13u1_armhf.deb e57140993f6204b63c538d0333200e9a3b5dc503 36126124 chromium-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 0434d8bee703096496db1a95cce1671f9e5c6125 7560904 chromium-driver_150.0.7871.114-1~deb13u1_armhf.deb 8e46151098a1628f7d354c2df91d801d6c6c8b50 28037212 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb f94128fa8c7a1a7d89573f32c1b8703eb56a5b4d 55633124 chromium-headless-shell_150.0.7871.114-1~deb13u1_armhf.deb f7894ada32eac7b5fa6dce44c5eac88c8f5897d4 19264 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 484a7f24aa24ae94bb5df3b1e2d28581e74f7b9e 131376 chromium-sandbox_150.0.7871.114-1~deb13u1_armhf.deb d2241cf034bd8d3bc0a9e3b847f169aa0040868a 30568600 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb a242cd3bbbfa649caf46072c01898278d2771f5a 61167536 chromium-shell_150.0.7871.114-1~deb13u1_armhf.deb 6cc393d7025ba030781947e7e5c92fa8a5e7ca51 30691 chromium_150.0.7871.114-1~deb13u1_armhf-buildd.buildinfo d5f880d635649c9cae3e0975afc4f05ce41dcb4b 73041740 chromium_150.0.7871.114-1~deb13u1_armhf.deb Checksums-Sha256: 887d966bf90906ff6c78aad36a4e967ae52d7989871af69a9d133c5961768292 5831504 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 988fa2d97f4b78b3f9b3507365ba15cb5832cd89899dd29ac349aff45856c758 26399904 chromium-common_150.0.7871.114-1~deb13u1_armhf.deb 2b160ca6f78a7a6e7b5549eda059e0c2e8583d155aa2a9f3cf9f893aa3230826 36126124 chromium-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 3120c70035016977335f9c4dfa9ec2b688d70dd5f510ea114d8ecafef91c48ef 7560904 chromium-driver_150.0.7871.114-1~deb13u1_armhf.deb 5b9aa8f5703bb615fe82c5950049080c8030d5aed127b47ca6c6e542517f7d47 28037212 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 8fd7dd58d16dcb9586c08654a7209e5428a2f3de4c1ff070b41550d600515940 55633124 chromium-headless-shell_150.0.7871.114-1~deb13u1_armhf.deb 85ae271e47a50972654c7f4155b8553c4927af2c76033351cb51fe9ad1ded248 19264 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb a2804cea6a6fd57a1a410d3ac562ad00f52c6df68234a24199a4aec56d5fc7a1 131376 chromium-sandbox_150.0.7871.114-1~deb13u1_armhf.deb 0b2fae892c0b36df565acf1310ac1e5be9b1f14c9d5418ef0bd72707694ce7f5 30568600 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 6cf91fad6345d3f8c603dbfbf525175f3079908a6bbd941d3cfe8748b7cc9fcf 61167536 chromium-shell_150.0.7871.114-1~deb13u1_armhf.deb bef528b2b0c9795a264a7260a143990c1185ae520d75042dee396e2ccf6ac372 30691 chromium_150.0.7871.114-1~deb13u1_armhf-buildd.buildinfo b128d7e03c7c4c22b17aab1b135f76271fe38bc26cda7df0498c697175f4d84f 73041740 chromium_150.0.7871.114-1~deb13u1_armhf.deb Files: 769bb04671f2ecceb374cf6dcf4876ca 5831504 debug optional chromium-common-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb d4cd19c03a9897d631461a9c04d1d516 26399904 web optional chromium-common_150.0.7871.114-1~deb13u1_armhf.deb b3898c912e446d89ee36948e4a57ba65 36126124 debug optional chromium-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 4e04c6add2aff37e35f6c21573bcce98 7560904 web optional chromium-driver_150.0.7871.114-1~deb13u1_armhf.deb 534f8df1058cded0d83f742d3ab6558b 28037212 debug optional chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 865fe5a7197ab2fc5f302af50ee43eb2 55633124 web optional chromium-headless-shell_150.0.7871.114-1~deb13u1_armhf.deb fb1c2d9994c852657320831876541c26 19264 debug optional chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 4eca6b643ea5517c5b742564cb10a109 131376 web optional chromium-sandbox_150.0.7871.114-1~deb13u1_armhf.deb 5f7074bda6169fb2329e5dcec85bdefa 30568600 debug optional chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_armhf.deb 56945b9fa93df7f6dde9beba80bf9618 61167536 web optional chromium-shell_150.0.7871.114-1~deb13u1_armhf.deb 4c1ea449a9396293345e9d27b1cc8b6a 30691 web optional chromium_150.0.7871.114-1~deb13u1_armhf-buildd.buildinfo 2c4e7b9e98a36b96de8f784835c89d2d 73041740 web optional chromium_150.0.7871.114-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmpSGHcACgkQnwznazfj XTp6Dg//XFMPn615siUN3IPtLTSVE70qf0pN+fxcE9RDO22Ari+VVheGSWC3U+IN d+1ErAzzcV4hflDRgln67IaANsZS3ks+DOVdgmWd5ybxB3qUb4S6CxhuWUGX+GPV F6sYln+FOnGNA3v5IhndSYR2PlaKEEPkBsPhQdX2hmxJzycrSxMe+tFcxJiwl+II 08C89CVabYkRNZLR7wLlX8+fjs4iqBrDTVShMBjjQ1ZzOSNxHQeVgEVS7DHRarHY 1vR1OD2w8HMiHGXAvguvU5fyU1PTBnkai8ta/A42J8MufS8ttI42TA5GT0nmfyP4 rUVt3A6Pnk8zsX4Z2cuCmUzm+UIW8B0n3UJOeHNDdI+kw2Rq8cW4YgIz5kOypMdI VtPOR/ScRoLJQba1Qlm3sg1MH5T6LTrrQN+1AsqBddCScPEc+8YB3JVN3QkcZRgP uv8LluXsXhA8xUOLZvQ6VEkf1l/ODOg5De1ICszQftDSL5VWsPREY5Fqgr62TMsM KYwnV+x/W7zxpvoNa30lFTl8jSQvFDuhjlwAUo2qyHHfwqQxlNc+emHViWu5qoxY wu1iar2uZYfburqe56s6MQhaXSjZHA4BiaZyL71UzBx8vyu6J8Qa8C6uah0hTaB8 nDQ/sJy0YbXnqgj4R16JmxRZur5GEO4g/48i9zHY0DaG7/qAkeM= =/x2q -----END PGP SIGNATURE-----