-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 149.0.7827.196-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: 3c2e8717bc54bcc653d8fed6995f16cb64b9f332 5817944 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb d798597766e4bc135bf9d7050d6404b0c1740f45 26014232 chromium-common_149.0.7827.196-1~deb13u1_armhf.deb ab866dff916261b719a98bf2c54c0e7e12f840d1 35520664 chromium-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb c167b2861df8d91990b63972288a496b236636c0 7380516 chromium-driver_149.0.7827.196-1~deb13u1_armhf.deb 851f30bd5d9dcf15ad2de0067ce6d7c6028a9359 27569544 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb e7f71e1be84fade316d34cd4c6f0470572381333 54973968 chromium-headless-shell_149.0.7827.196-1~deb13u1_armhf.deb 7b842f33234963e03b047ac5a754b03f7a3a70eb 19264 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb f7e2fdc72397f019c37d07a52cf008bad8040800 125744 chromium-sandbox_149.0.7827.196-1~deb13u1_armhf.deb 6249d7284cdb019a03c47f30237a1ec10245e9fa 30030300 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 9e0a7f70f676a6b934746172f5d736d2c5d86a15 60378328 chromium-shell_149.0.7827.196-1~deb13u1_armhf.deb 8214fd0bebcbb3699786bca78bdc37d390d5696a 30571 chromium_149.0.7827.196-1~deb13u1_armhf-buildd.buildinfo e8cc122b13167d329840c34e52fc928224bf790a 71965816 chromium_149.0.7827.196-1~deb13u1_armhf.deb Checksums-Sha256: bd808ceef4ec21d805077637fb9b3ca8007f2378e600d981bf47306f6ba89ac7 5817944 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb ebe0c9fadf8c13af1bbe4e640e95742eb24480b60dc1bdfb190e65aab3149a1c 26014232 chromium-common_149.0.7827.196-1~deb13u1_armhf.deb a60b491fa52b68764a7bb902161f95651361ddb206157ae372a885e95718bbea 35520664 chromium-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 6cbef60c74ee7a8fa1f213789233d71acaf522f2b5143d9fd641398d9ed39f0b 7380516 chromium-driver_149.0.7827.196-1~deb13u1_armhf.deb c27b1ae6b103269b9c2efc085e2f4841ee669bab7310f7f4c9b82c03d8fd2e10 27569544 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb f3b0cfec67a7a779de98a724deab882375cd3aae524dd0883cef929cc0f2c369 54973968 chromium-headless-shell_149.0.7827.196-1~deb13u1_armhf.deb a162f87ccaa5d6ad26e3c19902ada20458da08db5bb6a954e596de3b0c725515 19264 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 79de4ae7fa36ed42811921cbafad5cd5e5f9f353c6bf959d9f28cb12d9a6b19e 125744 chromium-sandbox_149.0.7827.196-1~deb13u1_armhf.deb f074f20d7b1ebfcfe0ee1c960a96f553aae5346d8d354889ab8f07988cffe600 30030300 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb ea447b68f1f8ac6e5fa02e08692284f7a89abe38fb44d0baf3f75eb9bc10c427 60378328 chromium-shell_149.0.7827.196-1~deb13u1_armhf.deb b52491ddc2915412d4e4869a12dff5d6b6f5320b4d7a9650e05877529f29eed7 30571 chromium_149.0.7827.196-1~deb13u1_armhf-buildd.buildinfo c609d6b31e757739dd4eef48ccf2bfdf287c4c5529a957b78a6c057bdfcca1b9 71965816 chromium_149.0.7827.196-1~deb13u1_armhf.deb Files: fdeee829fb1ffd5502effb0c81fcff5c 5817944 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 41445c697b3aae588ec21f6ecdac4f71 26014232 web optional chromium-common_149.0.7827.196-1~deb13u1_armhf.deb 0145822f701a24d262d3629d11f66f1c 35520664 debug optional chromium-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 3dfaa820d399f8af434126faed2e639f 7380516 web optional chromium-driver_149.0.7827.196-1~deb13u1_armhf.deb c41b8293c812fa72994ff01eab69e0fe 27569544 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb e23fa6f6baac355d01767583f96120df 54973968 web optional chromium-headless-shell_149.0.7827.196-1~deb13u1_armhf.deb 3c4cca2e48b16f30b9ed9a305eda2a07 19264 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb b6bca37521a0ced0ab3e7251ffeb433e 125744 web optional chromium-sandbox_149.0.7827.196-1~deb13u1_armhf.deb be43127398bda66a9bb23ab8b0c1c0f8 30030300 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_armhf.deb 827a657fc31f63e0c895d012f8790d1e 60378328 web optional chromium-shell_149.0.7827.196-1~deb13u1_armhf.deb 6d7c9cf662435b104fe56c5c94943792 30571 web optional chromium_149.0.7827.196-1~deb13u1_armhf-buildd.buildinfo 971028c92343b1fc9d33ba45d6edc5db 71965816 web optional chromium_149.0.7827.196-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmo9W8QACgkQutMAkCxK bL09pBAAv+RwTblBTcv8Sf1UQkWbI86b1JFLALNAY9ZNAoOArH6SPLbe/2ceyOlN GYDTUFGyxZ8LgHp7oGDwcXJ33y3hnJf//91OEu1gk3Dk94/EYsnm1oRuKot81DvW BQ3dw74dnIQpeCyPKMDjMyN6il2ehUA6nYPJnK+2tAB8fRtUatIssWl8t3uXSYvt QgMGISFrBMbWbVoHIn9LFOUHeMNWqySJwDBLi6vTlRktYvooRthK1jc0Cb/8lH6c OYDCOUrg5JueKpEC/xQ0NmYO7JhIp101Tf1by1QXbW9CZR8T8xuc4gnzT+uH7vkZ uwaxf+PXgDzxmUICuB123c2um+IYbDSzqJbMk0VRALhY/wlMyY2wGNvV+wuEfdY7 vL3wyA5ggDZ2z0K9hpqA7g+6uTZxZc2GBsUV9gZqQqaDhtFm2nXQByXoQEx44W4U I7dtRzCFlmtbJGusaCqzm5N9If/8k1q2SO+kQlWUNzmyTk3dAVykM/AhqgHfN9nn kIps8zj4o1v3LD96JNWA0bZXKG6V/KtcibBsB5L8hb3Oefq8adWQOFfhAhNK9lMq /AHv3feI9G64z1Gy/2csEke9q2d5/DP0c9OZOb4T/vnVKpAlemmAiN1m53M94ma/ +Z2bWdaIn+xlyOq3lY3Ew60oGCtki6ZlhcHFZptPnG9jIY5yjuc= =2NxY -----END PGP SIGNATURE-----