-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Apr 2026 15:06:40 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 147.0.7727.101-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (147.0.7727.101-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-6296: Heap buffer overflow in ANGLE. Reported by cinzinga. - CVE-2026-6297: Use after free in Proxy. Reported by heapracer. - CVE-2026-6298: Heap buffer overflow in Skia. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-6299: Use after free in Prerender. Reported by Google. - CVE-2026-6358: Use after free in XR. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-6359: Use after free in Video. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-6300: Use after free in CSS. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-6301: Type Confusion in Turbofan. Reported by qymag1c. - CVE-2026-6302: Use after free in Video. Reported by Syn4pse. - CVE-2026-6303: Use after free in Codecs. Reported by Google. - CVE-2026-6304: Use after free in Graphite. Reported by Google. - CVE-2026-6305: Heap buffer overflow in PDFium. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-6306: Heap buffer overflow in PDFium. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-6307: Type Confusion in Turbofan. Reported by Project WhatForLunch (@pjwhatforlunch). - CVE-2026-6308: Out of bounds read in Media. Reported by Google. - CVE-2026-6309: Use after free in Viz. Reported by Google. - CVE-2026-6360: Use after free in FileSystem. Reported by asjidkalam. - CVE-2026-6310: Use after free in Dawn. Reported by Google. - CVE-2026-6311: Uninitialized Use in Accessibility. Reported by Google. - CVE-2026-6312: Insufficient policy enforcement in Passwords. Reported by Google. - CVE-2026-6313: Insufficient policy enforcement in CORS. Reported by Google. - CVE-2026-6314: Out of bounds write in GPU. Reported by Google. - CVE-2026-6315: Use after free in Permissions. Reported by Google. - CVE-2026-6316: Use after free in Forms. Reported by Google. - CVE-2026-6361: Heap buffer overflow in PDFium. Reported by Google. - CVE-2026-6362: Use after free in Codecs. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-6317: Use after free in Cast. Reported by Google. - CVE-2026-6363: Type Confusion in V8. Reported by Google. - CVE-2026-6318: Use after free in Codecs. Reported by Syn4pse. - CVE-2026-6319: Use after free in Payments. Reported by pwn2addr. - CVE-2026-6364: Out of bounds read in Skia. Reported by Google Threat Intelligence. Checksums-Sha1: 8af13baca4736fc444ea86f379286d2e5a125052 5767616 chromium-common-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 197ca2052d0bcbf3cc3525cb4fbd4a33cc7c25c3 25117552 chromium-common_147.0.7727.101-1~deb13u1_armhf.deb 3a2f391adcec772bd2818308ea12d5b554307195 35183420 chromium-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 22011e9c5606979e494d8c68a2af3a9bc2bc64f8 7161468 chromium-driver_147.0.7727.101-1~deb13u1_armhf.deb fdc5840fd73d6672df22dea87c1a4fcf8d4b7f08 27490444 chromium-headless-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb a23369fa032de05cb393e68c0af2502a43eefb84 53951996 chromium-headless-shell_147.0.7727.101-1~deb13u1_armhf.deb dadf3c99eef1fd428039e63e69cc05b5954ef430 19256 chromium-sandbox-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 981eb273ed9a17aa3087670f562bd4d21e07aac5 113584 chromium-sandbox_147.0.7727.101-1~deb13u1_armhf.deb 2cf169d87df6eb109abfbf89cfc793061ad0c868 29823576 chromium-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 03184c0d0ea3789ac81c520f8d444bb621885b8b 58985412 chromium-shell_147.0.7727.101-1~deb13u1_armhf.deb bcbe892365de5ccffa0350c691b81d813d79d203 30312 chromium_147.0.7727.101-1~deb13u1_armhf-buildd.buildinfo 34b8ca4e43f85dc1116b3aaed487afac9b6ff7a2 70751320 chromium_147.0.7727.101-1~deb13u1_armhf.deb Checksums-Sha256: b71395410909d2add28ce41e1d72fe8fb5f0ae710fb6a8bad7698604baa9d0c0 5767616 chromium-common-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb b165596e6f4dc91003b86339607199f9fa11f29766e4ee96872585ebbac089b8 25117552 chromium-common_147.0.7727.101-1~deb13u1_armhf.deb 914bdfd160e8b620b8f7093fdfd3bcd55a4d102357fe14705481873bba16317a 35183420 chromium-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 21d2481bbc6635440f450242f33b7a2a68f16b4ddbd8e17393d6ed239cc14693 7161468 chromium-driver_147.0.7727.101-1~deb13u1_armhf.deb 79f2981c9ab8d121907eab6341fc130a076e893d472d3c9ecbc51aeef3949a08 27490444 chromium-headless-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 3ceb3ea4532e15a09c901431aa35d9f97129c6fd6da620c39e905ef253a70cd0 53951996 chromium-headless-shell_147.0.7727.101-1~deb13u1_armhf.deb f038b8d02980e21e8a459f92f88dbac46cdc57445de14528021ec52330b9dde4 19256 chromium-sandbox-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 88f2eabf9320f5d7f2b89d383eb4c77c84097c4c3d2eba4a37f2ca8aa23db38c 113584 chromium-sandbox_147.0.7727.101-1~deb13u1_armhf.deb 595481159ef09dfb9626f73f2536c5e24d7a719ac1fd8d74945f2e79458c423f 29823576 chromium-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 4bce52197c39dcc3e3c253d24b87f07cde71b56bad8dc7bf45abe3eebc45df69 58985412 chromium-shell_147.0.7727.101-1~deb13u1_armhf.deb 757ecd4d377bf899b58728e1b600fcdc1abc5712b7f95f4eaeadd4d32a376874 30312 chromium_147.0.7727.101-1~deb13u1_armhf-buildd.buildinfo 3efeddb61837f568cb4fe41ca95d678bde4ea4feb39fc0a353b713f69f3c5b23 70751320 chromium_147.0.7727.101-1~deb13u1_armhf.deb Files: c97ccd716d29a2f79eb764cd2539073f 5767616 debug optional chromium-common-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 391d61a9a82b818c5b352db929e9495e 25117552 web optional chromium-common_147.0.7727.101-1~deb13u1_armhf.deb d8bdafa0096e0be44625d7cd567a448e 35183420 debug optional chromium-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 812499c44c6d24bc27b38baeabf357b3 7161468 web optional chromium-driver_147.0.7727.101-1~deb13u1_armhf.deb 30f47bce14d04f5f08202db56eb9e289 27490444 debug optional chromium-headless-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 834a131f6053070e9b47eb84174deb11 53951996 web optional chromium-headless-shell_147.0.7727.101-1~deb13u1_armhf.deb 3df828bf97fc812ff3e341e8411a5a95 19256 debug optional chromium-sandbox-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb 95002e62a8cb9e89ae634ed924d71ede 113584 web optional chromium-sandbox_147.0.7727.101-1~deb13u1_armhf.deb be0bfaa1a30ff182b0f604c8fdd7479f 29823576 debug optional chromium-shell-dbgsym_147.0.7727.101-1~deb13u1_armhf.deb fd9d8288bcf579f8c082d8acb50f3cb6 58985412 web optional chromium-shell_147.0.7727.101-1~deb13u1_armhf.deb f066a3f0d772af9859dfbfb19530055c 30312 web optional chromium_147.0.7727.101-1~deb13u1_armhf-buildd.buildinfo 89a7dabf9a179dc363036f82499fd8a4 70751320 web optional chromium_147.0.7727.101-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmnh0goACgkQ8U6eOZMp j6/LZxAAviiwZZWLHqopJx3XXwiehqomr4LnM38O5yappCRdC7N+Chz5SD6av8bf nBDo1KQJqqLeWR8sYWDACapGeao0e70+LeN850XWmLMo2NFAW50K0fd4WWtl1BxE A9PRCS7n0pduotO6HzjhSruiaDCpH94HtvewSaRVjEIr83wRs45CEIHxhvzXIgIJ C/Y3A4Fc/h2nD2iG9ERaSwFLrDAyrYof7j5NBvdF2ZJ8kg9TtoLGfRMu4RXZ9pxv muOKji4AR7KD90AZt0jWXb1vX8JkHRQWG2o7LUw8+lRlIjLmU7cTH/Qp4r0roe6G gGXPuoaXZ3uSzH/2I6sUKI877LI+Un9IS/1Mxp3fVFXnSQw0WOeZmGvg4O9qFlH1 Q3CBEUU0dDqi8cGVJDa0tagFiEr4QYi9EWdKoj+hHcrru5DKKhpOuDbN2dlGPfrZ xOxQt+QspaQ4ZJluJpfGySegO0P4xOGThqz1cqBuSEsTnIWB5kcm7gVFi8nmxg2R HntQ8AZwjyePiREntZoR+fvatx0BE0gSOq9x18VDt0owgMn1nBLZVXYMWhoWubiu 9o7x8FCOrvmVhpYbpq97yrNmslY2PVr8EI5TYKGIdc3zEorh6Rf1qTwPdIiK9zd6 lWzL8W7ZEOadrwOusJoNfE9A6NOfZP8DTFyDjbjkEkmtgqKY6e4= =EvZH -----END PGP SIGNATURE-----