-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jun 2026 17:27:35 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 149.0.7827.114-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.114-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12007: Use after free  Core. Reported by Google. - CVE-2026-12008: Use after free  DigitalCredentials. Reported by Google. - CVE-2026-12009: Insufficient validation of untrusted input Accessibility. Reported by Google. - CVE-2026-12010: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12011: Use after free  WebMIDI. Reported by Google. - CVE-2026-12012: Use after free  Network. Reported by Google. - CVE-2026-12013: Use after free  Media. Reported by Henock Habte, Independent Security Researcher. - CVE-2026-12014: Use after free  Cast. Reported by Google. - CVE-2026-12015: Use after free  Autofill. Reported by Google. - CVE-2026-12016: Insufficient validation of untrusted input  DevTools. Reported by Google. - CVE-2026-12017: Insufficient validation of untrusted input Extensions. Reported by Google. - CVE-2026-12018: Inappropriate implementation  Mojo. Reported by Google. - CVE-2026-12019: Out of bounds write  Codecs. Reported by Google. - CVE-2026-12020: Use after free  Autofill. Reported by Google. - CVE-2026-12022: Race  Safe Browsing. Reported by Google. - CVE-2026-12023: Use after free  GPU. Reported by Google. - CVE-2026-12024: Insufficient policy enforcement  DevTools. Reported by Google. - CVE-2026-12025: Insufficient validation of untrusted input  Network. Reported by Google. - CVE-2026-12026: Out of bounds read  Video. Reported by Google. - CVE-2026-12027: Insufficient policy enforcement  Headless. Reported by Google. - CVE-2026-12028: Use after free  GPU. Reported by Google. - CVE-2026-12029: Use after free  Video. Reported by Google. - CVE-2026-12030: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12031: Inappropriate implementation  Views. Reported by Google - CVE-2026-12032: Inappropriate implementation  Passwords. Reported by Google. - CVE-2026-12033: Out of bounds read  VideoCapture. Reported by Google. - CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming. Reported by Google. - CVE-2026-12035: Use after free  Views. Reported by Google. . [ Jianfeng Liu ] * d/patches/loongarch64/0024-fix-libyuv-lsx.patch: drop due to upstream reverting to version of libyuv that doesn't have lsx issue. Checksums-Sha1: 1a4296ead5fc1efb4fbf76d127244be85835985a 5780908 chromium-common-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 72eb2dda215d8f30df41a6fbd9e7ab6da80bda7a 26017420 chromium-common_149.0.7827.114-1~deb13u1_armhf.deb cee559992777c546ce946877a42abe700dd9a674 35493928 chromium-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 86ad22250628f1409a0365d992662a16f48e3000 7379976 chromium-driver_149.0.7827.114-1~deb13u1_armhf.deb 2f9827dc87c8cd917df74f46d6a9cf157a9753f0 27566212 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 522f6bbc9363995a85ff7acd9b11f9e3c06bd13f 54962756 chromium-headless-shell_149.0.7827.114-1~deb13u1_armhf.deb 1724920ef083f9f6ec278c44ba3300f7a80e4b4e 19256 chromium-sandbox-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 236744a2fc1aee2ff654cac980a8587cbeb80c90 125404 chromium-sandbox_149.0.7827.114-1~deb13u1_armhf.deb 16507e7d137e8189f24764a7e861be829392cfc2 30062836 chromium-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 7495888ffa5db5b12a846a973f8006db5f751691 60366164 chromium-shell_149.0.7827.114-1~deb13u1_armhf.deb 424242a37b33f080cca764d6770aa986c15310c8 30555 chromium_149.0.7827.114-1~deb13u1_armhf-buildd.buildinfo 5a76af592f07fc45fcd8d71cc1ddc3fd45d0551c 71955992 chromium_149.0.7827.114-1~deb13u1_armhf.deb Checksums-Sha256: e5129fcdf994e52dbd4485ff6dff50c6fe5f872117315537f2a7ce9b0aa62ae2 5780908 chromium-common-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 81fbec7aad5273b63fd920bb9320e2f947df335c2a7576b8cd87077d2ef8ef0d 26017420 chromium-common_149.0.7827.114-1~deb13u1_armhf.deb 843f7e315e9a0ccc07fd659b4b8d87db9d4d7d915ff5aa8f2906b94fc9f9a975 35493928 chromium-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 2f4a09051fc6b0fea95060771cda571c16c90d13ac86d0d76f907ef8afdd8b3f 7379976 chromium-driver_149.0.7827.114-1~deb13u1_armhf.deb a1419a40fbcd4634154912e2871b2535873a09c3d5fe7cb8a929caa70a9f2911 27566212 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb b88a37db89232b821bd4c7046bde362606f37d4197a884376ded05adacba19c1 54962756 chromium-headless-shell_149.0.7827.114-1~deb13u1_armhf.deb 4c3ed2f64f63b2abfcd59662d3e1e2b21d76d95b606604ddd92f867e4c703d98 19256 chromium-sandbox-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb bbc0f1bfaaa57fb18b114e1eda8ed96a2d8569ca5bce8a5fe276b978d677134f 125404 chromium-sandbox_149.0.7827.114-1~deb13u1_armhf.deb f652a545482cad087bce82e907ca14532bc5ca1f06d3bfefafeb8ba71f45016e 30062836 chromium-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 0fbf53a243e52c34f126beba7aa4125c0adcb2667f9c933aa73eb72e3455e59d 60366164 chromium-shell_149.0.7827.114-1~deb13u1_armhf.deb 40b139cb0d3950bff17bc9349619a2f91e31c1771d3a525ff42ff944b47c5126 30555 chromium_149.0.7827.114-1~deb13u1_armhf-buildd.buildinfo 855dd1bb9fbdd542ee382ed2d2b256c75e14caafcfd4e6abffc6434660bfaff6 71955992 chromium_149.0.7827.114-1~deb13u1_armhf.deb Files: f1f58e7f4b3e64ba159488ce912ae417 5780908 debug optional chromium-common-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 2ea21c9eb102187294748ee01c894c20 26017420 web optional chromium-common_149.0.7827.114-1~deb13u1_armhf.deb 7e634b2760f42a34757598cf427b4e7f 35493928 debug optional chromium-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb d3a6991aab095aed1da7e4a027bf98de 7379976 web optional chromium-driver_149.0.7827.114-1~deb13u1_armhf.deb 70955eb5e66a14020de36d98c75ff286 27566212 debug optional chromium-headless-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 9e05d7f355f61156bb3edbf4eb9b647e 54962756 web optional chromium-headless-shell_149.0.7827.114-1~deb13u1_armhf.deb d0b49e736eb904653e79b0c1af2d512b 19256 debug optional chromium-sandbox-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb 3dddc63f913ff45eb5eac2fa57ade3eb 125404 web optional chromium-sandbox_149.0.7827.114-1~deb13u1_armhf.deb acaa3dc9cc062bd4411787ad62530b55 30062836 debug optional chromium-shell-dbgsym_149.0.7827.114-1~deb13u1_armhf.deb b2e77aa7f68a1e82f188f1a810ee6583 60366164 web optional chromium-shell_149.0.7827.114-1~deb13u1_armhf.deb 57dc88d5b28002c0f25f625e68e0133c 30555 web optional chromium_149.0.7827.114-1~deb13u1_armhf-buildd.buildinfo 7d41a26535652ac5fba76c7404c9e2ae 71955992 web optional chromium_149.0.7827.114-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmotfQcACgkQOQKMdMnE H5N+KxAAmKtfuQIKddedsOtBDlJpbI9Md1aTDXDSOdOq+mYouVojZ1T4guftT2FB dBCyWDRK2D8XL+fGGw2SuqQpp0pwmLl8a8cSWnRfk1WVZcBTz9CHYtxvDhvT0+sr 7Km3LqS/lrOskXjXe4w6v6NyYqp4UrvHnHhNq7qFSNTbWHfhwXS9wiCIo5UcCYIt LaH9hs6HMg04syGR72emfbCDlODhzsv6CHtn5+aS4+ql5kg49CIZneOp2xeDdW2g 2Zd7yamtifRFOEwByVuZ05Y+oidrt1/HwgsuL6rDP/yM039T6TcP1iuM+o21RhHW xUK+rDAJrW2/wsqH7iVJThnBDXS3s3RroajyvbwD/Cu/64C3DHaVzh8a3/kwnXOS TPwVLk0a5mwXi2BtKuY8hwKH/yzq45Z/CZCHfd+RXD53kneeKqhTp67J29GojMxw xdldejOyq+oKiw7d5Swu7a5d2bSXbQB3OL6lNDRzqwcdW0ibqNIL6uMAAZ9PB4ys vxGU8btoRwVoqDrf8gjV1pi5wfk/VkI1IDRXOyfXH2jkrKkkNXrtHpW5Rz5PUq08 ih1+tcbHAjdyH4vn9RAOD7zJHTuOvwe5XEmJmxqAc3qjnvfHHKGfvh6QAuTsLIaY Q5z0xzlSTE2zeF1Lg3MBTXV4bhRz0o/XXGMhiWL9l7tdAG/8MVw= =TT8J -----END PGP SIGNATURE-----