-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 148.0.7778.178-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: d1feb82fe7223976c8e3affc000b4c9dd3c6574e 5799892 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb ec4ad28b761060de9196d71fca61d3559e9db4e7 25483728 chromium-common_148.0.7778.178-1~deb12u1_armhf.deb da3a38e248bc55fb7ddd020ca2dd398e8965ed25 35392464 chromium-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb f09096a94649977376d1d1cf13e0bb89597b30cd 7212956 chromium-driver_148.0.7778.178-1~deb12u1_armhf.deb 24a5f57224315e32b2618fc619d6c8ad63e8708c 27509240 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 14150e676fd349128235c03cbc9e8d44f4b7128b 54435068 chromium-headless-shell_148.0.7778.178-1~deb12u1_armhf.deb 217a783bedb1831256aee13c8c7e414bf83c1e5b 18004 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 3e366854478aa5518201da56290aa9d775281097 119736 chromium-sandbox_148.0.7778.178-1~deb12u1_armhf.deb 8cc04b10c2885d06bc8c0d2aba64d3fe30bb6d84 29902436 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 14a00fe5f110b528099f95ac1f4978574acf34d5 59723340 chromium-shell_148.0.7778.178-1~deb12u1_armhf.deb 695387af782a84f5d691aab2cd4982aa76adeb3f 30363 chromium_148.0.7778.178-1~deb12u1_armhf-buildd.buildinfo 35ea9325425460f7d158cf4e6e3a5f84d2239417 71471456 chromium_148.0.7778.178-1~deb12u1_armhf.deb Checksums-Sha256: 6e0a04a08b8b65e64152e912d849d881e868ed7b1130a50cd326e2b7ce7da562 5799892 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb fbba6473521dab65088c4486d91aab1bdf654c35ce32e438cb9a549aef71f029 25483728 chromium-common_148.0.7778.178-1~deb12u1_armhf.deb f924da486e77cefb513fabb9a03d9c94045ed7cafea45067b2103c670043111e 35392464 chromium-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 796a0ed1f8f7184b078ce319edc5e9acff432e77250ef62d6120a5a704abbe78 7212956 chromium-driver_148.0.7778.178-1~deb12u1_armhf.deb 5b7a93d708fe4b6a2db8783208ed15974b51ec47f47b3ae20c48c0ef9ec31bf9 27509240 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb c337ce1f9771c25c83cea51e779981ed0942188ea1eb3614463a0f98b43b7b20 54435068 chromium-headless-shell_148.0.7778.178-1~deb12u1_armhf.deb c82966e2c6e7c0025ee8d4a9eb968a834653a44a17c0c402e3916b855e09189e 18004 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb dd24d41ebf84eee7326cca13dc5eb6d309c22ab1ace727978a6acc49661cc9dc 119736 chromium-sandbox_148.0.7778.178-1~deb12u1_armhf.deb 7bb30b81faca0687910d549dcdcfc9243d712b2cb9c475cf55cfdf732a4311b7 29902436 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb a28207f8fbfedfc3b34759ff74989e386a8d98fb9761c9e8a751d36808f7c055 59723340 chromium-shell_148.0.7778.178-1~deb12u1_armhf.deb 11d16c96a43df4b9e0a04ff09511ace469cb8ee940bd5bea5d57c76e3b7a5c5d 30363 chromium_148.0.7778.178-1~deb12u1_armhf-buildd.buildinfo ffde9661e1492fb3586e63dd294d6dc6962a3ab3d8d7afd75e345a8c9dc839ae 71471456 chromium_148.0.7778.178-1~deb12u1_armhf.deb Files: bf72f57afd8e700bd275b4550032637a 5799892 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 99601208d646be753c6b1c5a4c1e8d06 25483728 web optional chromium-common_148.0.7778.178-1~deb12u1_armhf.deb 4b74b318d4335c883fdce0ea21cfad73 35392464 debug optional chromium-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 21f4bdfbbadf4515cb5e45eaec8609b2 7212956 web optional chromium-driver_148.0.7778.178-1~deb12u1_armhf.deb 29db2a35f217d25c67cdd84d7def1681 27509240 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 125a8cf2379892ffad1f6770d0a89205 54435068 web optional chromium-headless-shell_148.0.7778.178-1~deb12u1_armhf.deb 5d62059c2992ea502e6ca21cf6b1cdef 18004 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb dcc976fa46d0a22f0a8b5f90fb0f48f5 119736 web optional chromium-sandbox_148.0.7778.178-1~deb12u1_armhf.deb 060cec55cdc46b477a7f871b49f3ed8f 29902436 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_armhf.deb 223411c6ad8b937cb36fe4bef755fa3f 59723340 web optional chromium-shell_148.0.7778.178-1~deb12u1_armhf.deb ed5f987989509dae3aa0bb3b0f2cf79c 30363 web optional chromium_148.0.7778.178-1~deb12u1_armhf-buildd.buildinfo b4f351a067ca2594ccf702f36a5300ad 71471456 web optional chromium_148.0.7778.178-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmoPCAsACgkQutMAkCxK bL19dRAAwuIF6+9/kBqHl18mb3ZIuGR1wGJMsI6XhJ3nbi3K0WC5wMOOt1e54SkL LsMpWR5tYWYi1XagrQ8X2XuQ3Xa0Pg5TXOZF1kH+7PfrOJlp1fy5LN/i2CmKGNwu 3B/klFhvln92kMgfZeY4OzsHXuW+w7+GvSUZHY4KNnsJDMHu8Dhls39ahBOdYMiv uTHpH0LxXv/XUdQgbm19CGEjPnTxo9z4zmX3wpbMHJYlw7N0u6OngLZsZs0Px6+L W9JDFZsWabfWu9vPZWZ8cEW2bH0j17N9En8ipVP05PgRIMJ/H8km9iHZ7EJIyS5u +Ycc6s6Nb0sDne3ndpAdIjwgVqGQYDBMwYxAGnxNR6Mkfq2S/I4+xZJ0zefzQmhf 9u3HMVHSNyAxtF7BSNjKirFVvkTDKPJbLAmvbLVPE+fYq8nX//GjB3oYU6k3/xon C8HFK4wWbSWjbeTpx+SJmgRXJE4+aWyre8Jz+r06kLTnbbGZOvKdKA4vna9wMh3Q E1/S9XdSNN8XfRoJ9qvY/9J80k7XKKWWq+OnfarYCJIJaFL1CN7J7CeTVOEfWZCZ M3veNSRLR9DiX2sSYsKsOMx7hcK+pDkeGW16VPp2SYyUCDwXLx1CqjRsXPvPzMvs DC9U/4pRKSCnhQ7fmOvwrXgoqv/wfhs24V2BgSVnM3Sj3dmipWM= =NJ2v -----END PGP SIGNATURE-----