-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 148.0.7778.178-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 3cec8dc37561945107591ee70a027f68adb07451 5222272 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 06b14731a340ef64859ae4417171983458301a81 25752492 chromium-common_148.0.7778.178-1~deb13u1_amd64.deb a80309e576354ee45c2f428af2d622df6c3611f4 33212912 chromium-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb c1e16bd4d8e3dd6ae2a34719d6b0bb044eff9c2f 7521120 chromium-driver_148.0.7778.178-1~deb13u1_amd64.deb 39a52302cb97a44b2b7e2c5c2acb94c5150d2823 28143768 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 4cf07990356d94660f78d535ced693dbb9fb56f7 62879472 chromium-headless-shell_148.0.7778.178-1~deb13u1_amd64.deb be9d72391fa8f086a458850f90e762642978fbdb 20216 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 3d08e88fe5721c3eb9777f788a31bf803d3fe5e2 117944 chromium-sandbox_148.0.7778.178-1~deb13u1_amd64.deb f8be823327c176b688b6db46ccc88eb766d7b2ab 29725612 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb c514dff93918dfa99bccf5d2aa706ed795cec24e 62445308 chromium-shell_148.0.7778.178-1~deb13u1_amd64.deb d47b71b7bad8ccf7a4a19d4788b8e040775b28e5 30680 chromium_148.0.7778.178-1~deb13u1_amd64-buildd.buildinfo aec9085446e131d8158da4230a33f3750f58f956 85174844 chromium_148.0.7778.178-1~deb13u1_amd64.deb Checksums-Sha256: 561db2d76d5baac349498a9fcb6cb9c63defbbffaeeee9972734c7093a366100 5222272 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 07548c486e3021a2953184d9ad7100f8a38c42c03427eca6bf9e4c0d2b9f2260 25752492 chromium-common_148.0.7778.178-1~deb13u1_amd64.deb c7ca5aea5dfcd0187a86e569940263470e1296806f5a1cc59cf19cd863749c2d 33212912 chromium-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 65b6e94ff7347af9e6f10599608e908b088f4f936b6839584bfbfd9bf66a113e 7521120 chromium-driver_148.0.7778.178-1~deb13u1_amd64.deb 8fe48bc7a55838c99b2550f093f33d4fb809652ef187d6bf64a6cfa4d5555a03 28143768 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 50ece763bba1ec7afa4bb027e4daec182a6554c836072b33bab9f72629804a6b 62879472 chromium-headless-shell_148.0.7778.178-1~deb13u1_amd64.deb ff146e8c5271d52a037bdf8a38b42570d17614f10588de800c64424a1b369d54 20216 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb ecc5b504dff10163646b1379b2643c3245b1720330e822b2695d0738d2e420f8 117944 chromium-sandbox_148.0.7778.178-1~deb13u1_amd64.deb b17ad9d2d1f3b68a143d13f40435e8e669c832bc40927a75e4303fac212f3f0a 29725612 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb b827be640c8ee646d42f83f25dce6ae024af7e27bdc0d0d4793ae7033de0feea 62445308 chromium-shell_148.0.7778.178-1~deb13u1_amd64.deb 9318ddc1c4edf9c5c2fe8923d943c55d703f402ab57c68dcbd533687931bb85a 30680 chromium_148.0.7778.178-1~deb13u1_amd64-buildd.buildinfo 8a6a00a5288fd6fc655b818fee45b047a3fe055ec28f89db35d6fc0c393c3fd5 85174844 chromium_148.0.7778.178-1~deb13u1_amd64.deb Files: 00497efdc9192e80e6c5e6852ae9980a 5222272 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb c3a0d1108485acfc7de04b7908639c01 25752492 web optional chromium-common_148.0.7778.178-1~deb13u1_amd64.deb 4c5dd0fa0641b805d145722b91add1b1 33212912 debug optional chromium-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb e08cc1c5ab62dd068c3516d0da24d5fd 7521120 web optional chromium-driver_148.0.7778.178-1~deb13u1_amd64.deb cc1f01499a1dbfbf0b189843c7579351 28143768 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb a1d241ea37a2129e7461aefa6f8879fd 62879472 web optional chromium-headless-shell_148.0.7778.178-1~deb13u1_amd64.deb 043fd6223c4160a30d70effb66f27803 20216 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb eca1b86240d3535deed7cf383b7d3892 117944 web optional chromium-sandbox_148.0.7778.178-1~deb13u1_amd64.deb cb0ddb2c8ede11998e6b09edb3125d66 29725612 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_amd64.deb 0f3207110f1dbcb49b9000ce8b9b9859 62445308 web optional chromium-shell_148.0.7778.178-1~deb13u1_amd64.deb 57bb60cd9e443519eb39b7d0ccee3535 30680 web optional chromium_148.0.7778.178-1~deb13u1_amd64-buildd.buildinfo 0a01f549fe70722b64cceeea8e4aedc7 85174844 web optional chromium_148.0.7778.178-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmoO7EMACgkQPkCWRKsh 20dzYA/+OSf9g9irRgm+iSb+BzxXRQok+ouhPmHmtEkAhAj0/QXatHnfHe+hvlva +8Rzpf/tlYN85MFdTOo0fGFvmHnW3kpX2jh/bNDtYNcdDg/YTprogWytv4tLq5E6 od/DxZ+uvICgjNMdw2d2PHesEAXch2AYNDuhkv0HjhgkZbg5+mjj8+5ALo9a/V4O lUoIGevvXv9GZ5wIhdvW+z9TVeA5qIMatirLQk7oFRt9cAKCWMm9RGakChHhpDlC QnRbxrMhT/Daf2JakoT9FiyBLyBVqYQOPmqclWwvLGqEQwCYQMUl7xk2a7x0+Kbq 3brgPHEWMzbjSKyLZ+o5H8N/8gGq3Z7esgNx075SskCD1/W8Jl90ohKHDlYRY8Wb 5/Fr1zV2UKMWEJVxAp8BHnKsIYoD+1pgM1210kHOARgzDmu059PtpvzkwMUPN3dL T9upTSbEtZ17jL26Nu335THs+U/KlmOlz/J5UvbbfYv+2pIFNyg2x4v/iHN9OU6h dOdPh+u6pfmivHFpEcLyb2bnCgt+7kThwS6LOw7Ov3VZll5YuiHPIpcsoXhPJ+2P wcneb08kvVAO1wvHuPDlVsNPfMJxCIdFfsAUZeT482EA72eIJenUD35t4CiE5hWF Y90gF/dK4WnHVXDSZcknnnLBA1ZK+zwElJ/6FFs+Ne+iRkwRyTs= =oHC9 -----END PGP SIGNATURE-----