-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 14 Jul 2026 23:16:33 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: arm64
Version: 150.0.7871.124-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (150.0.7871.124-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-15764: Use after free in Ozone. Reported by Google.
     - CVE-2026-15765: Use after free in Ozone. Reported by Google.
     - CVE-2026-15766: Uninitialized Use in Skia. Reported by Google.
     - CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google.
     - CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas.
       Reported by Google.
     - CVE-2026-15769: Insufficient validation of untrusted input in
       Linux Toolkit Theming. Reported by Google.
     - CVE-2026-15770: Uninitialized Use in V8. Reported by Google.
     - CVE-2026-15771: Insufficient validation of untrusted input in Media.
       Reported by Google.
     - CVE-2026-15772: Use after free in GPU. Reported by Google.
     - CVE-2026-15773: Use after free in Core.
       Reported by xinchaotian of Microsoft.
     - CVE-2026-15774: Use after free in Skia. Reported by Google.
     - CVE-2026-15775: Insufficient policy enforcement in V8.
       Reported by wang1r923096443@gmail.com.
     - CVE-2026-15776: Type Confusion in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-15777: Use after free in UI. Reported by Google.
     - CVE-2026-15778: Insufficient validation of untrusted input in
       Navigation. Reported by Google.
   * d/patches/upstream/libyuv-loongarch-fix-row_lsx.cc-and-row_lasx.cc.patch:
     drop, merged upstream.
Checksums-Sha1:
 811ed0a79c316378ea1102fa9c77a7628a2313b6 6158316 chromium-common-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 fb6527d82ee437ff033ac8386251727f0d1eece1 31189280 chromium-common_150.0.7871.124-1~deb13u1_arm64.deb
 d6019a524c174c9d51e398d1d384b8f945dbd706 35406128 chromium-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 ef3114a97d9472f6736a3c8e37b0435e21eade01 7043196 chromium-driver_150.0.7871.124-1~deb13u1_arm64.deb
 4b4eaadf88c25c1759fd2b4d81ad15487a380683 29478180 chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 0dd9b6c54c4ee37afb018c1957202766aae03d32 56028884 chromium-headless-shell_150.0.7871.124-1~deb13u1_arm64.deb
 dd7af6be4d55ae291a402e9d82e152eaf4418937 21064 chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 fe1d2368ff30867c2f7c2a966f6fc8b64bd7b333 132760 chromium-sandbox_150.0.7871.124-1~deb13u1_arm64.deb
 39127c97d7382c49fb07c050a2b0779a97e57c98 31013892 chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 053ab2d5fe660a39b33ee90d22591a9612ce115a 56127560 chromium-shell_150.0.7871.124-1~deb13u1_arm64.deb
 2371d42cc8077406a4542258f864981ac3dd0a30 30919 chromium_150.0.7871.124-1~deb13u1_arm64-buildd.buildinfo
 8e3fcd8d68598d8270b4fc93bcafaf5322038ac1 75080476 chromium_150.0.7871.124-1~deb13u1_arm64.deb
Checksums-Sha256:
 77b6b9e94f612ee41c307231e7e1eb67a8e11b2307446af8c1d75ef1fbd2b02f 6158316 chromium-common-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 2513e5bdd8040f2b59e0f65612f23c5e5b9a063c6244ffeb6d7751905d98f50f 31189280 chromium-common_150.0.7871.124-1~deb13u1_arm64.deb
 85c4aec30adcbee6aeb52a6ca6ae051ff2073dc2dff69f8e188043c1cb0d0d0f 35406128 chromium-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 444e36dc199e35ec1749b7baa1cc983a310c04a300ae27ffba11b95b0e5f059a 7043196 chromium-driver_150.0.7871.124-1~deb13u1_arm64.deb
 650ebf47e3ef067bfacc19e968ce8ad8de1c7a98583efa8adcff0ff0bbe7ab09 29478180 chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 9b659a0479b173c0e53ce1d20f00db79a3f55356015e128302324bfdff7e7443 56028884 chromium-headless-shell_150.0.7871.124-1~deb13u1_arm64.deb
 ffcc6c00a9ae6884162bd69b7b9b241e7f2df2efe689c28757bc5749482f8337 21064 chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 b3b35965b490307527eb73f700a65e0077f13631586bad164961d0be77975d4d 132760 chromium-sandbox_150.0.7871.124-1~deb13u1_arm64.deb
 47db2e65eb77d38cd4d2879c013608f7918c865d37afe5f3ca35b71eec248d43 31013892 chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 70ae462f909ab7f48af1a78405adbfb72f20b423ac7a04d7fc6fa4bb7735bdad 56127560 chromium-shell_150.0.7871.124-1~deb13u1_arm64.deb
 a05aff131d5497e1ba345eed4760190f196faa7e6db76e4cdf4777c48cc4ea44 30919 chromium_150.0.7871.124-1~deb13u1_arm64-buildd.buildinfo
 ff41732eacd16c025bd54a5f042c4ab22a9040e575b14338d8bbac19a3e6da1d 75080476 chromium_150.0.7871.124-1~deb13u1_arm64.deb
Files:
 b3fb27e60c49f44beb129e4c86fdf207 6158316 debug optional chromium-common-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 ab919394697d5216c150ca3eb8c6e0e6 31189280 web optional chromium-common_150.0.7871.124-1~deb13u1_arm64.deb
 9cd3f9f7156ee0d1cef0f73690716cce 35406128 debug optional chromium-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 761e9721190cb5e8378c5f496820228b 7043196 web optional chromium-driver_150.0.7871.124-1~deb13u1_arm64.deb
 19e81a5f024b7fcd22583bd0b5b868ea 29478180 debug optional chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 1e32598c6ebad2e14d3e7753dd0b5f1c 56028884 web optional chromium-headless-shell_150.0.7871.124-1~deb13u1_arm64.deb
 3d476a0e162b140708aa384a8f918420 21064 debug optional chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 8b62bb60373cebad34165345f956380b 132760 web optional chromium-sandbox_150.0.7871.124-1~deb13u1_arm64.deb
 a1b031db48c1a24b06ffca3120e1c647 31013892 debug optional chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_arm64.deb
 b5ca0f24371aaba1466d19e4da6cd40e 56127560 web optional chromium-shell_150.0.7871.124-1~deb13u1_arm64.deb
 44cab10a6df51d4fe47b7082e31b90a5 30919 web optional chromium_150.0.7871.124-1~deb13u1_arm64-buildd.buildinfo
 2dc31300f847bb7439be76af54ec1c75 75080476 web optional chromium_150.0.7871.124-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=wqxt
-----END PGP SIGNATURE-----
