-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 May 2026 16:32:51 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 148.0.7778.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-7896: Integer overflow in Blink. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-7897: Use after free in Mobile. Reported by Google. - CVE-2026-7898: Use after free in Chromoting. Reported by Google. - CVE-2026-7899: Out of bounds read and write in V8. Reported by Project WhatForLunch (@pjwhatforlunch). - CVE-2026-7900: Heap buffer overflow in ANGLE. Reported by Anonymous. - CVE-2026-7901: Use after free in ANGLE. Reported by Syn4pse (@ret2happy) - CVE-2026-7902: Out of bounds memory access in V8. Reported by JunYoung Park(@candymate) of KAIST Hacking Lab. - CVE-2026-7903: Integer overflow in ANGLE. Reported by heesun. - CVE-2026-7904: Out of bounds read in Fonts. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-7905: Insufficient validation of untrusted input in Media. Reported by Google. - CVE-2026-7906: Use after free in SVG. Reported by Google. - CVE-2026-7907: Use after free in DOM. Reported by Google. - CVE-2026-7908: Use after free in Fullscreen. Reported by Google. - CVE-2026-7909: Inappropriate implementation in ServiceWorker. Reported by Google. - CVE-2026-7910: Use after free in Views. Reported by Google. - CVE-2026-7911: Use after free in Aura. Reported by Google. - CVE-2026-7912: Integer overflow in GPU. Reported by Google. - CVE-2026-7913: Insufficient policy enforcement in DevTools. Reported by Google. - CVE-2026-7914: Type Confusion in Accessibility. Reported by Google. - CVE-2026-7915: Insufficient data validation in DevTools. Reported by Google. - CVE-2026-7916: Insufficient data validation in InterestGroups. Reported by Google. - CVE-2026-7917: Use after free in Fullscreen. Reported by Google. - CVE-2026-7918: Use after free in GPU. Reported by Google. - CVE-2026-7919: Use after free in Aura. Reported by Google. - CVE-2026-7920: Use after free in Skia. Reported by Google. - CVE-2026-7921: Use after free in Passwords. Reported by Google. - CVE-2026-7922: Use after free in ServiceWorker. Reported by Google. - CVE-2026-7923: Out of bounds write in Skia. Reported by Google. - CVE-2026-7924: Uninitialized Use in Dawn. Reported by Google. - CVE-2026-7925: Use after free in Chromoting. Reported by Google. - CVE-2026-7926: Use after free in PresentationAPI. Reported by anonymous - CVE-2026-7927: Type Confusion in Runtime. Reported by Google. - CVE-2026-7928: Use after free in WebRTC. Reported by Google. - CVE-2026-7929: Use after free in MediaRecording. Reported by Google. - CVE-2026-7930: Insufficient validation of untrusted input in Cookies. Reported by Satoki. - CVE-2026-7931: Insufficient validation of untrusted input in iOS. Reported by Qadhafy Muhammad Tera. - CVE-2026-7932: Insufficient policy enforcement in Downloads. Reported by Povcfe of Tencent Security Xuanwu Lab. - CVE-2026-7933: Out of bounds read in WebCodecs. Reported by heapracer (@heapracer). - CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker. Reported by Google. - CVE-2026-7935: Inappropriate implementation in Speech. Reported by Qadhafy Muhammad Tera. - CVE-2026-7936: Object lifecycle issue in V8. Reported by Christian Holler. - CVE-2026-7937: Insufficient policy enforcement in DevTools. Reported by lebr0nli of National Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab. - CVE-2026-7938: Use after free in CSS. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-7939: Inappropriate implementation in SanitizerAPI. Reported by s3zer0. - CVE-2026-7940: Use after free in V8. Reported by sakana. - CVE-2026-7941: Insufficient validation of untrusted input in Mobile. Reported by Adithya Kotian. - CVE-2026-7942: Integer overflow in ANGLE. Reported by Google. - CVE-2026-7943: Insufficient validation of untrusted input in ANGLE. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache. Reported by Google. - CVE-2026-7945: Insufficient validation of untrusted input in COOP. Reported by Google. - CVE-2026-7946: Insufficient policy enforcement in WebUI. Reported by Google. - CVE-2026-7947: Insufficient validation of untrusted input in Network. Reported by Google. - CVE-2026-7948: Race in Chromoting. Reported by Google. - CVE-2026-7949: Out of bounds read in Skia. Reported by Google. - CVE-2026-7950: Out of bounds read and write in GFX. Reported by Google. - CVE-2026-7951: Out of bounds write in WebRTC. Reported by soft.connect.fr. - CVE-2026-7952: Insufficient policy enforcement in Extensions. Reported by Google. - CVE-2026-7953: Insufficient validation of untrusted input in Omnibox. Reported by Google. - CVE-2026-7954: Race in Shared Storage. Reported by Google. - CVE-2026-7955: Uninitialized Use in GPU. Reported by Google. - CVE-2026-7956: Use after free in Navigation. Reported by Google. - CVE-2026-7957: Out of bounds write in Media. Reported by Google. - CVE-2026-7958: Inappropriate implementation in ServiceWorker. Reported by Google. - CVE-2026-7959: Inappropriate implementation in Navigation. Reported by Google. - CVE-2026-7960: Race in Speech. Reported by Google. - CVE-2026-7961: Insufficient validation of untrusted input in Permissions Reported by Google. - CVE-2026-7962: Insufficient policy enforcement in DirectSockets. Reported by Google. - CVE-2026-7963: Inappropriate implementation in ServiceWorker. Reported by Google. - CVE-2026-7964: Insufficient validation of untrusted input in FileSystem. Reported by Google. - CVE-2026-7965: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation. Reported by Google. - CVE-2026-7967: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-7968: Insufficient validation of untrusted input in CORS. Reported by Google. - CVE-2026-7969: Integer overflow in Network. Reported by Google. - CVE-2026-7970: Use after free in TopChrome. Reported by Google. - CVE-2026-7971: Inappropriate implementation in ORB. Reported by Google. - CVE-2026-7972: Uninitialized Use in GPU. Reported by Google. - CVE-2026-7973: Integer overflow in Dawn. Reported by Google. - CVE-2026-7974: Use after free in Blink. Reported by Google. - CVE-2026-7975: Use after free in DevTools. Reported by Google. - CVE-2026-7976: Use after free in Views. Reported by Google. - CVE-2026-7977: Inappropriate implementation in Canvas. Reported by Google. - CVE-2026-7978: Inappropriate implementation in Companion. Reported by Google. - CVE-2026-7979: Inappropriate implementation in Media. Reported by Google - CVE-2026-7980: Use after free in WebAudio. Reported by Google. - CVE-2026-7981: Out of bounds read in Codecs. Reported by Google. - CVE-2026-7982: Uninitialized Use in WebCodecs. Reported by Google. - CVE-2026-7983: Out of bounds read in Dawn. Reported by Google. - CVE-2026-7984: Use after free in ReadingMode. Reported by Google. - CVE-2026-7985: Use after free in GPU. Reported by Google. - CVE-2026-7986: Insufficient policy enforcement in Autofill. Reported by Google. - CVE-2026-7987: Use after free in WebRTC. Reported by Google. - CVE-2026-7988: Type Confusion in WebRTC. Reported by Google. - CVE-2026-7989: Insufficient data validation in DataTransfer. Reported by Google. - CVE-2026-7990: Insufficient validation of untrusted input in Updater. Reported by Google. - CVE-2026-7991: Use after free in UI. Reported by Google. - CVE-2026-7992: Insufficient validation of untrusted input in UI. Reported by Google. - CVE-2026-7993: Insufficient validation of untrusted input in Payments. Reported by Google. - CVE-2026-7994: Inappropriate implementation in Chromoting. Reported by Google. - CVE-2026-7995: Out of bounds read in AdFilter. Reported by Google. - CVE-2026-7996: Insufficient validation of untrusted input in SSL. Reported by heesun. - CVE-2026-7997: Insufficient validation of untrusted input in Updater. Reported by ochkofficial. - CVE-2026-7998: Insufficient validation of untrusted input in Dialog. Reported by Tianyi Hu. - CVE-2026-7999: Inappropriate implementation in V8. Reported by Taisic Yun (@taisic) of Theori. - CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver. Reported by Ryan Jupp - HAAO. - CVE-2026-8001: Use after free in Printing. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-8002: Use after free in Audio. Reported by Google. - CVE-2026-8003: Insufficient validation of untrusted input in TabGroups. Reported by Google. - CVE-2026-8004: Insufficient policy enforcement in DevTools. Reported by Google. - CVE-2026-8005: Insufficient validation of untrusted input in Cast. Reported by Google. - CVE-2026-8006: Insufficient policy enforcement in DevTools. Reported by Google. - CVE-2026-8007: Insufficient validation of untrusted input in Cast. Reported by Google. - CVE-2026-8008: Inappropriate implementation in DevTools. Reported by Google. - CVE-2026-8009: Inappropriate implementation in Cast. Reported by Google. - CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation. Reported by Google. - CVE-2026-8011: Insufficient policy enforcement in Search. Reported by Google. - CVE-2026-8012: Inappropriate implementation in MHTML. Reported by Google - CVE-2026-8013: Insufficient validation of untrusted input in FedCM. Reported by Google. - CVE-2026-8014: Inappropriate implementation in Preload. Reported by Google. - CVE-2026-8015: Inappropriate implementation in Media. Reported by Google - CVE-2026-8016: Use after free in WebRTC. Reported by Google. - CVE-2026-8017: Side-channel information leakage in Media. Reported by Google. - CVE-2026-8018: Insufficient policy enforcement in DevTools. Reported by Google. - CVE-2026-8019: Insufficient policy enforcement in WebApp. Reported by Google. - CVE-2026-8020: Uninitialized Use in GPU. Reported by Google. - CVE-2026-8021: Script injection in UI. Reported by Google. - CVE-2026-8022: Inappropriate implementation in MHTML. Reported by Google * d/copyright: - drop gperf binary that upstream now includes. - update for dropping of "khronos" from opengl paths. * d/rules: - copy gperf binary from /usr/bin into build tree. - set webnn_use_litert=false. * d/clean: - update for harfbuzz-ng to harfbuzz rename. * d/patches: - upstream/Fix-GL-native-pixmap-import-support-reset-in-GpuInit.patch: drop, merged upstream. - disable/lint.patch: refresh. - trixie/nodejs-set-intersection.patch: refresh for file rename. - ungoogled/disable-ai.patch: sync from u-c. - trixie/gn-inputs.patch, trixie/gn-inputs2.patch: add patches to revert gn "inputs" usage, which isn't supported by our older generate-ninja package. - llvm-22/ignore-for-ubsan.patch: add another bit to remove the same unsupported compiler flag. - llvm-19/iota.patch: add build fix for missing std::ranges::iota(). - upstream/turboshaft.patch: add build fix pulled from (v8) upstream for value_or() type ambiguity. - trixie/revert-v8-sanitize.patch: add patch to revert v8 gn-related changes that cause the build to fail w/ older gn. - llvm-19/raw-ref-map-find.patch: add patch to work around older clang-19 std::map::find() limitation. - rust-1.85/jxl-features.patch: refresh for new version [trixie, bookworm]. - rust-1.85/jxl-simd-avx512.patch: refresh for new version, and also drop large portions of this patch that add unsafe{} to macro calls (since I already added an unsafe block in the macro definition). And mark more functions as unsafe [trixie, bookworm]. - trixie/adler1.patch: refresh [trixie, bookworm]. - trixie/rust-is-multiple-of.patch: refresh & move to rust-1.85/ directory [trixie, bookworm]. - rust-1.85/file_as_c_str.patch: add patch to work around lack of std::panic::file_as_c_str() [trixie, bookworm]. - rust-1.85/mojo-features.patch: add patch to enable some newer rust features in mojom parser [trixie, bookworm]. - rust-1.85/zip8.patch: add patch to enable some newer rust features in zip [trixie, bookworm]. - bookworm/constexpr.patch: refresh for moved file [bookworm]. - bookworm/dav1d-drop-hdr.patch: refresh [bookworm]. - bookworm/eslint.patch: drop, no longer needed [bookworm]. - ungoogled/remove-navigation-source-param.patch: add patch from u-c to drop the "&source=chrome.ob" that shows up when you search for something via omnibox. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0002-regenerate-xnn-buildgn.patch refresh for upstream changes - third_party/skia-vsx-instructions.patch: refresh for upstream changes - fixes/fix-different-data-layouts.patch: refresh for upstream changes . [ Jianfeng Liu ] * d/patches/loongarch64: - 0004-loong64-sandbox-sandbox-linux-Update-syscall-helpers.patch: Refresh for upstream changes - 0024-disable-BROTLI_MODEL-macro-for-some-targets.patch: Drop, merged upstream . [ Daniel Richard G. ] * d/patches/llvm-19/clang19.patch: Also drop -Wlifetime-safety-permissive flag from v8 build, as clang-19 (and 20) doesn't recognize it. Checksums-Sha1: 43acf16b5a20d293b427ad975944fde4a458e895 5305628 chromium-common-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 37dd94fd1ba8c653d8bc8d61dc223ee4ad89dfa6 25717332 chromium-common_148.0.7778.96-1~deb12u1_i386.deb 781abe854e1cbe88541e0eafae9a574f9db589c4 36121568 chromium-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 43a93a0a6e67638d0204614aab042e16c866f5e5 7937124 chromium-driver_148.0.7778.96-1~deb12u1_i386.deb 520b7153e67bc43fbf4ac2e34d75eece847fa7d8 29765896 chromium-headless-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 991e7db7e92a2d0cd7d047a14cfa6a43500399a4 59242604 chromium-headless-shell_148.0.7778.96-1~deb12u1_i386.deb a6ca53ed919d71d8251acfc3d707a75d42647402 17828 chromium-sandbox-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 468ab9d11a984f35434b27e9176015dad6af3b28 118840 chromium-sandbox_148.0.7778.96-1~deb12u1_i386.deb aab191cd46be89d8eb159310d8d80b60a0ee13df 32607364 chromium-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb d311e95a2d752df5f74bb286e3855823e9c63616 64919156 chromium-shell_148.0.7778.96-1~deb12u1_i386.deb 915043127919b3203fecf2a7089fd6cb09748f9f 30379 chromium_148.0.7778.96-1~deb12u1_i386-buildd.buildinfo 8ee88988493febbfc50a840de06f6e28e26caf21 77569696 chromium_148.0.7778.96-1~deb12u1_i386.deb Checksums-Sha256: ae66f1e094fb4e193fb3c3116322a2e69ccb28341800fc74055ea2dba1a1569f 5305628 chromium-common-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 4317cf3d845a21396dde837f0b8323f72c2e3902aefc772947bd3c5ecfb685db 25717332 chromium-common_148.0.7778.96-1~deb12u1_i386.deb bd22db294b4a500b3b320e40ed0ca13d01cff3fbdda06ec19699790cb3fac38e 36121568 chromium-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 642389b359373816090971347effef1eef49a1a999ec318daaa3be4236149117 7937124 chromium-driver_148.0.7778.96-1~deb12u1_i386.deb b07339ddd9e1a998688f24ef20425c239a6d06d1e1204d08ab5247c7ca9b26e0 29765896 chromium-headless-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 64802b47594173973569ed566bf216fcb3fe633f5c6d672bc3fe1a5089cb0e5e 59242604 chromium-headless-shell_148.0.7778.96-1~deb12u1_i386.deb 006c62aa4ef7cc12c1efb7df5d2691f363f08d38bd212ac2d9da001500731026 17828 chromium-sandbox-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 2b6aa1a272c6efb31ffa84a3297baabdd947ed5093190cecbb3bce2312b57dbd 118840 chromium-sandbox_148.0.7778.96-1~deb12u1_i386.deb 4e3e2d92728ff0104fdca8e8eff40ae97a3369c1efd2f926740b0cebe1190f15 32607364 chromium-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 0fa5b75d706d40baefb79606ec38539902f55abd8f5865e8a6e295e4b917dd24 64919156 chromium-shell_148.0.7778.96-1~deb12u1_i386.deb 9115601b64f414dd47978cf1b5f3cee7599a8c300031cc4e2e9fde1fa2af8a4b 30379 chromium_148.0.7778.96-1~deb12u1_i386-buildd.buildinfo cf9c6cdfa4beaca1a5310f6c6e54bca0b38b1db7fe372d8eae0e0f063d4a36ad 77569696 chromium_148.0.7778.96-1~deb12u1_i386.deb Files: b096fbad3024b859f213b86176912caa 5305628 debug optional chromium-common-dbgsym_148.0.7778.96-1~deb12u1_i386.deb c10453d3fb21a81c7c4ba146b399f7f2 25717332 web optional chromium-common_148.0.7778.96-1~deb12u1_i386.deb 34179fea08d8b2391bf9eaadbc766f5e 36121568 debug optional chromium-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 600f83cf6a4ecdb69d6cd82f7665bb83 7937124 web optional chromium-driver_148.0.7778.96-1~deb12u1_i386.deb 36ca1a352c7af0655d2b2d2031ee21f5 29765896 debug optional chromium-headless-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 81a34df24c760e24e138e6a2831d018b 59242604 web optional chromium-headless-shell_148.0.7778.96-1~deb12u1_i386.deb 972a3e50ea48cc689deadeabaf1fddf8 17828 debug optional chromium-sandbox-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 8415796ff3bcef63d8d39747696215ef 118840 web optional chromium-sandbox_148.0.7778.96-1~deb12u1_i386.deb 2cfb990c64ecb205f9789d19253dd56c 32607364 debug optional chromium-shell-dbgsym_148.0.7778.96-1~deb12u1_i386.deb 95fcd9d3c321c0f5467982940140ec60 64919156 web optional chromium-shell_148.0.7778.96-1~deb12u1_i386.deb dde3fa9c654d14b3ef4fd91b5e3bf5ff 30379 web optional chromium_148.0.7778.96-1~deb12u1_i386-buildd.buildinfo 3b9b0f8ffe31b9ee2785e448f242c931 77569696 web optional chromium_148.0.7778.96-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmn8uXkACgkQbheoBegw XLLJphAAhvbpMkM4DWaDMO5kBspCSI8eCgMmvObD+x9ZwdcboMqcNT82s3N0cWrA 8p+KvjyIGAryjjo8BjDFr52DuPpVKJRQUCHw7TCKPYRkoBn1haem1vBhyOwXTD1s dilC8RXj/RpGyNOy69dMn8VC0yo2zwpWITs39PPt9pL2sCTSYXtjLpaQR4uQ+g6/ 2Aw/gSo706g+w3/Pm91Sr3mgauMdD7VEvaKwKV/RrHhWQ4ijCmayBvbruj5xSK3R Mf1qCo/WrkqmNz4+Nd+nPdAGyyZC0qpq2oTySGmp2NUEPoqAAS9M6y1OpF86MG5K JY8NS9rtWaqQ642fXdPvvVuPOwba8MJSEnWUbgGxMqJtD0QD/Z9HE+dUbsZNGhTY nQVZY7Hf8pQKLFGMFHxJg6BPXzoARdXrxX8spWAwIVxHNMvnLGTbJ3w4FUjkuy1f fwR+Vu++Kh5cQi7139rNTZujxDGxBlVc5KpwtOGsnbu6nvu6XeMxI8O5yyhRZuZV pNG/ZODvlHM9ymUjK+FNf5wyB7YU8p6DgYjGlo9byGcfW8JHeO3JYiC1FH0/WFEi Yfd8QvS6LqvjM74AH45Omi2KWoGSAxJRmkV4XNLhue3f5hVdAGxlG0xPh8FofUsi Y5YBTnSyw3QbX6wuEFZ84dLkaFF/NWVVpCpgBZtQvrOWzhO6p4g= =BiqP -----END PGP SIGNATURE-----