-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Jul 2026 01:45:42 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 150.0.7871.114-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (150.0.7871.114-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-15112: Use after free in Ozone. Reported by Google. - CVE-2026-15129: Use after free in Views. Reported by Google. - CVE-2026-15132: Uninitialized Use in V8. Reported by Pierre Langlois from Arm. - CVE-2026-15133: Use after free in InterestGroups. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-15108: Integer overflow in Extensions API. Reported by Google. - CVE-2026-15109: Uninitialized Use in ANGLE. Reported by Google. - CVE-2026-15110: Use after free in Extensions. Reported by Google. - CVE-2026-15111: Use after free in Views. Reported by Google. - CVE-2026-15113: Use after free in Autofill. Reported by Google. - CVE-2026-15114: Out of bounds read and write in Codecs. Reported by Google. - CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google. - CVE-2026-15116: Use after free in Actor. Reported by Google. - CVE-2026-15117: Use after free in Payments. Reported by Google. - CVE-2026-15118: Use after free in Input. Reported by Google. - CVE-2026-15119: Inappropriate implementation in GetUserMedia. Reported by Google. - CVE-2026-15120: Use after free in Core. Reported by Google. - CVE-2026-15121: Use after free in WebRTC. Reported by Google. - CVE-2026-15122: Insufficient validation of untrusted input in Codecs. Reported by Google. - CVE-2026-15123: Insufficient data validation in DOM. Reported by Google - CVE-2026-15124: Insufficient policy enforcement in Passwords. Reported by Google. - CVE-2026-15125: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15126: Use after free in Forms. Reported by Google. - CVE-2026-15127: Inappropriate implementation in WebGL. Reported by Google. - CVE-2026-15128: Inappropriate implementation in Forms. Reported by Google. - CVE-2026-15130: Insufficient policy enforcement in Navigation. Reported by Google. - CVE-2026-15107: Use after free in IndexedDB. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab. - CVE-2026-15131: Insufficient data validation in Navigation. Reported by Google. Checksums-Sha1: dc7aa694d169bbd956d8916e2eca906eb7f594f1 5208164 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 7bb8c0ec97e23d81958f7a8a585d882b1ad7801f 26647460 chromium-common_150.0.7871.114-1~deb13u1_amd64.deb c6506ac84eb7de812611fcd3e5803a6822bd1374 33869024 chromium-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 80fc211e7106e0d296acfa5e8de3a322f1b00f87 8024972 chromium-driver_150.0.7871.114-1~deb13u1_amd64.deb 21523504b579c22f0c1cb46a0b9cf608148659a2 28612420 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 7e9dd19e2fd4ca44cea94c459f0f473ee4f30b72 64260256 chromium-headless-shell_150.0.7871.114-1~deb13u1_amd64.deb 99b0a93c6e57b00df0ab856f83918fb5504dfcef 20228 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb d6182429233c3bbbdd59f6a1190c74120014511d 131756 chromium-sandbox_150.0.7871.114-1~deb13u1_amd64.deb b9891c9131574803207bded8f640f2c9b3d0c2fa 30314400 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 7e0a4694878256c4a2c095cdb5af8487d4d25a22 63932288 chromium-shell_150.0.7871.114-1~deb13u1_amd64.deb 7c17d9d199d5f5edc0f4ea0e3f493b717978e81d 30816 chromium_150.0.7871.114-1~deb13u1_amd64-buildd.buildinfo 1afe251b69e2e4df474fc13ac84ee492559b37f4 87181844 chromium_150.0.7871.114-1~deb13u1_amd64.deb Checksums-Sha256: a2656ee095df0fe3dc636ac9106291006effd2485e554b470e5d4c03e4a231fe 5208164 chromium-common-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb bed11f93fe3f9b6dceabb0dc6dd991672e4e46aedc344e0ca666c54d755dcb5e 26647460 chromium-common_150.0.7871.114-1~deb13u1_amd64.deb 98fdd064e05bdb701df1632796f7cd596359356d76fadf99ed0d37a6633d76d1 33869024 chromium-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 836d27d03357b3ca7ab4f9efc1fef9b8422b675fec259ab0edb1a3475afdd3d8 8024972 chromium-driver_150.0.7871.114-1~deb13u1_amd64.deb ac0da568fefa9f4d799acb724377209a1777bdc41e758b137281510fa1260c49 28612420 chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 64136367363309ed85d2b4d4eb6a94c776b92bf4ae90f9ef447e03f03f3bfe88 64260256 chromium-headless-shell_150.0.7871.114-1~deb13u1_amd64.deb ce82b067cd2bfc521997b969896541662969080a603bc693140f74e1bd836ace 20228 chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb c4260191081b28375ea29444474ff0a161a5510f44cdeab383f0c1bb883ec040 131756 chromium-sandbox_150.0.7871.114-1~deb13u1_amd64.deb 5a0bddb1d855a7b90f45629dc373c58cda37689577dd610c6b1b8424e7da3b5f 30314400 chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 2b64e1963a6332ebf5d7ddaa674125c5865743af3fc396e4e8ecc50e72009e5d 63932288 chromium-shell_150.0.7871.114-1~deb13u1_amd64.deb 0184b4a4c355ebeabd7a4d1d8aa20958fcae434b6b37d14de6987d6e48856efe 30816 chromium_150.0.7871.114-1~deb13u1_amd64-buildd.buildinfo b24fe23efc4a2ad47b42ca9a96aaf116cd8d4d4aba7d2aea4740c981f3a39d01 87181844 chromium_150.0.7871.114-1~deb13u1_amd64.deb Files: 734b0cd752f756feb60f7ef726861594 5208164 debug optional chromium-common-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb b40ea440b3646fe55daed45da2cc35fc 26647460 web optional chromium-common_150.0.7871.114-1~deb13u1_amd64.deb 1e32636a3b8fb3087e6cf00c3ed3ce69 33869024 debug optional chromium-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 6f561bc17333fc0ffb7fcd94a8bde21a 8024972 web optional chromium-driver_150.0.7871.114-1~deb13u1_amd64.deb ec467b8497235099d8d32f3bc5425818 28612420 debug optional chromium-headless-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 293965d27a8ad01afb8d829eac2dd8d1 64260256 web optional chromium-headless-shell_150.0.7871.114-1~deb13u1_amd64.deb f8602cd2e771564766039f30790f5f30 20228 debug optional chromium-sandbox-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb 342f6b7df2c65a4bcdf867c335c3f957 131756 web optional chromium-sandbox_150.0.7871.114-1~deb13u1_amd64.deb e1b94e7f0d9968ee20b5525289f49c55 30314400 debug optional chromium-shell-dbgsym_150.0.7871.114-1~deb13u1_amd64.deb b26869d48a3e3e5e3f60077041aac8dc 63932288 web optional chromium-shell_150.0.7871.114-1~deb13u1_amd64.deb d59d9d3b115492941173556f903292bb 30816 web optional chromium_150.0.7871.114-1~deb13u1_amd64-buildd.buildinfo 4ad82d292ef4f0f650e888fe428effd0 87181844 web optional chromium_150.0.7871.114-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmpSAhoACgkQPkCWRKsh 20fbhw/+JAZOTDHVEhHpmplyGRwtBnR/GigMpyh01lQcCrSQuMcuKrHYuleM6vWF 3C640Igmkk6vitbqt2ttsVsc9Ay9SBlbVJWty1Tr8vmVEErxfx3vJnE0Xn5qNYH8 6IC5ni8I2XeRSGeBU1KmLVgubWaHrwkDigx5Be6/saBU6miuQmoD3WAWShGBZ31N P3R9+uIfM3VeTvv16Z+UtBD6KTowRJIeaFR6AB7S4eUpHKBDo9/GfHY+IHuYh3J4 8d34E8I4L8uCzap+uvM4KUeByvBK5DlHGIAEUNwnQFpte8Zdm/tiGrv1w8SWxza+ HwpNrdqL7tA2fQj8ha6p+cZmKLl46jlccnn49q5nWc0N1r/dR1Qsnwof4V3DQx/b +Uk+q4n3THIbzWkLgAdbwZ2+i/l3yCwjSOCNmbrFv4JCJzm6KYxalKXBI/tPrucL i84vwnpiErb0HxM5CM1iUDY1Fr+pBTEToS029gzTG6JsNIZaVxo9eiI87Z3VkB2F mOXvgA5FAAb5nTffEE0xbCnCXC8Y6IYW1+n4cWLgsICYoOLBV0sQj98axgQQIS32 4A6IqSzhbO5rx7iee3C8edRFvHaerL1IVqCT/YDd40HdEGfONRa9Z7judwdAtTDc 7yvzyCqX5LN9wUa57e7llXrkVmCR+97SIGLb3BxpFjcszzcnZrk= =OfmJ -----END PGP SIGNATURE-----