-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 148.0.7778.178-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 15684e97071733b392dffa211dea04e4efe7ef2b 5337388 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_i386.deb cfacffdec28cc31c8686cd79a3302453bbb7cef1 25691208 chromium-common_148.0.7778.178-1~deb13u1_i386.deb d710c881d828801ed37670864ac7840105760203 36136284 chromium-dbgsym_148.0.7778.178-1~deb13u1_i386.deb c94706d4a970a7392ba581680eec1be67e9b8d84 7932332 chromium-driver_148.0.7778.178-1~deb13u1_i386.deb 118dd02ce58092897ea14bd4a62b814bd225beef 29784816 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb ad1da64a35c2d5cf01986bd43bdaa0454aca480e 59229168 chromium-headless-shell_148.0.7778.178-1~deb13u1_i386.deb 138d09934eb59d2e7344547e7617e560f4b3d367 18984 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 602748ee0646c510b3a0428fb266c089d0baa26a 117796 chromium-sandbox_148.0.7778.178-1~deb13u1_i386.deb 4630d2f32446afa0637387e0918f3ab54f2a090a 32612156 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 029840fbf3f180a260798b4a025586680ec88984 64895984 chromium-shell_148.0.7778.178-1~deb13u1_i386.deb 440cf4ec58d41b5977419fe1a75c7b99d20cc537 30602 chromium_148.0.7778.178-1~deb13u1_i386-buildd.buildinfo 1c10254eb249e5590c73798e3798ad2037aaf1a0 77592288 chromium_148.0.7778.178-1~deb13u1_i386.deb Checksums-Sha256: 00987247fed70649a244ad7d4ebfae8fbd2fa7cf5b322dc3745d1104d61028df 5337388 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_i386.deb da546c6e80256ffd0af7b5b8902039c2b88c87066bb16e15d2b1aff34cbf8053 25691208 chromium-common_148.0.7778.178-1~deb13u1_i386.deb 2b94f11461b961f2978f29b6684b277dca005e44716f2f0e445e7a8fecb342ad 36136284 chromium-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 16f05f3b43b7c7ce7da0436f58fd715e8fb6e527d48385354a4b2f82d945e3d5 7932332 chromium-driver_148.0.7778.178-1~deb13u1_i386.deb 5e8352b265b9e05c8540f23c0e37382a02e03ed2cecad8284c2478fc698c8f62 29784816 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb e41194e3d4bda60a6614cdbe90bc42bb6e7cea83af83ed0d7628ffc4e69e24d5 59229168 chromium-headless-shell_148.0.7778.178-1~deb13u1_i386.deb 9d432f00a167c01aac0c0fb39c099d3e65583f374c57687f1cd54a696c56a308 18984 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_i386.deb f1c5a5b1ed2526c1c054d91beb0fd74355d642d46011a23f8f8aecf740b9a40b 117796 chromium-sandbox_148.0.7778.178-1~deb13u1_i386.deb bc1b0c8557a374ecb10a2cc89bb3f9398d6340ba26321d57d66f2911fd2a1e31 32612156 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb e72851dd8e509661dc56714072492b0ef1c22909e3f9321de374348824bc776d 64895984 chromium-shell_148.0.7778.178-1~deb13u1_i386.deb b9e53423ec0a667a1ad2f7001e624125b9bde45d4812e950fda7df083dc89a2a 30602 chromium_148.0.7778.178-1~deb13u1_i386-buildd.buildinfo c9f4b2e25e9c4192a39332e4871edeb6a3b5bce832508b6d4e52b9a1b08f132b 77592288 chromium_148.0.7778.178-1~deb13u1_i386.deb Files: d1f0d6c569da961db3c88b4687e018ba 5337388 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 5303b75490e2e07742e60ca3683d54c3 25691208 web optional chromium-common_148.0.7778.178-1~deb13u1_i386.deb 619836282d413f1ece87f6d4dfabe0c5 36136284 debug optional chromium-dbgsym_148.0.7778.178-1~deb13u1_i386.deb fd759e7ef3a934ad213b02019f044e6e 7932332 web optional chromium-driver_148.0.7778.178-1~deb13u1_i386.deb 929f84a7b3f386f0498b929e3da53347 29784816 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 5b1531169e4448b43ac7da76a59dea04 59229168 web optional chromium-headless-shell_148.0.7778.178-1~deb13u1_i386.deb 87d1e49e863a8ec19975a2174af4577b 18984 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_i386.deb a3461cd07c8ce5896d20d08bfdc0e6d0 117796 web optional chromium-sandbox_148.0.7778.178-1~deb13u1_i386.deb 253c39d86d2d140c2321ca4f209c3349 32612156 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_i386.deb 81ffef14a471d44591e986e6fd86b2a8 64895984 web optional chromium-shell_148.0.7778.178-1~deb13u1_i386.deb 3111abcac69d0952f17b9550a9302e95 30602 web optional chromium_148.0.7778.178-1~deb13u1_i386-buildd.buildinfo 8fd820fed8b89de736157b5f3aad57eb 77592288 web optional chromium_148.0.7778.178-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmoPAIcACgkQGNGWmfrq ILFuAg/+K8M8NvJbuIVWqmhkTQdMgavFVia9VygpKefANREP3U/ZuMISTNeB2ijN UPCIrFGV5hGl0b2Mn2pXsVr27LTTEfGuVUUPnBHbDhY2/t7GSOsgKbkC6LdXq6GA 46l+OcaDaMPRvph/xJmibtMbgRNDz4EKUP+lBs00jTOaApVXN9gBScy+owtLkiDx dB+Qd0GHSFoQ7cxmKyal/MfHSY8opsV/oNmQNLzU8QBtJ+h/mQAHdUQDwj0LWxIS GQVEUPKy/eVbMLw3keGEbpZXgmdNfNSfXShrXrfVmQKCqXLebyOQ3pEbL1X9XhWY V1cf35ijVlFNKlr3EHkj9pYXt585PyM4S9M173otToRcfJ7SVGTrrjjVGdhUJyzW kycnPv+fzkaPS5MmAkUCBDOCGmlfyxEn39XubyLExTwmD0Q7wWsXqG4/J6jshqvP ghpB3Kz/+tnqFENtManISQAQundPE39YWuq1q6VSTfoaIAWXzT4Z/8CtXAwyKU2L EFOSXooUZxZZgRpTVrFj9GcUWSwkH5XU8Vi8ZJgmrlC+ig86q5Jhuh1HKjyNqG3o NCCEOJS8btEWtcP6cpen2+dbsnjXYpmbACOAgxShZUpBXPkMCI5/auLDuYMUNRNM Q6Li46hz+dsYn4FhI4XIkh8+NdA30ab0Ca7pxnWZaJOl0FMeqaI= =T1gL -----END PGP SIGNATURE-----