-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jun 2026 17:27:35 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 149.0.7827.114-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.114-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12007: Use after free  Core. Reported by Google. - CVE-2026-12008: Use after free  DigitalCredentials. Reported by Google. - CVE-2026-12009: Insufficient validation of untrusted input Accessibility. Reported by Google. - CVE-2026-12010: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12011: Use after free  WebMIDI. Reported by Google. - CVE-2026-12012: Use after free  Network. Reported by Google. - CVE-2026-12013: Use after free  Media. Reported by Henock Habte, Independent Security Researcher. - CVE-2026-12014: Use after free  Cast. Reported by Google. - CVE-2026-12015: Use after free  Autofill. Reported by Google. - CVE-2026-12016: Insufficient validation of untrusted input  DevTools. Reported by Google. - CVE-2026-12017: Insufficient validation of untrusted input Extensions. Reported by Google. - CVE-2026-12018: Inappropriate implementation  Mojo. Reported by Google. - CVE-2026-12019: Out of bounds write  Codecs. Reported by Google. - CVE-2026-12020: Use after free  Autofill. Reported by Google. - CVE-2026-12022: Race  Safe Browsing. Reported by Google. - CVE-2026-12023: Use after free  GPU. Reported by Google. - CVE-2026-12024: Insufficient policy enforcement  DevTools. Reported by Google. - CVE-2026-12025: Insufficient validation of untrusted input  Network. Reported by Google. - CVE-2026-12026: Out of bounds read  Video. Reported by Google. - CVE-2026-12027: Insufficient policy enforcement  Headless. Reported by Google. - CVE-2026-12028: Use after free  GPU. Reported by Google. - CVE-2026-12029: Use after free  Video. Reported by Google. - CVE-2026-12030: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12031: Inappropriate implementation  Views. Reported by Google - CVE-2026-12032: Inappropriate implementation  Passwords. Reported by Google. - CVE-2026-12033: Out of bounds read  VideoCapture. Reported by Google. - CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming. Reported by Google. - CVE-2026-12035: Use after free  Views. Reported by Google. Checksums-Sha1: f50300c9a9c809155532a1cb949bbf43b8ed6998 6491484 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb d053740a726bceba3489c2c2cf1382599459d860 30964968 chromium-common_149.0.7827.114-1~deb12u1_arm64.deb da1ad3dcef8ddd9b249ec98b57b3e450b255fa36 37845280 chromium-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb de5c6f32f4e22bff68da9536b8c2fd4ca83052d8 6920708 chromium-driver_149.0.7827.114-1~deb12u1_arm64.deb 3cb861933661268662afd8bbc60dd79a2bca0312 30672364 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb 36cd0e5f74cbc0fa5cd2dc064f8b760ac9f85535 51548776 chromium-headless-shell_149.0.7827.114-1~deb12u1_arm64.deb 263c1625cfa9e5fa986e8f397b88967ed6f77b18 20260 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb fe55395e323a53898a1fd26ddfe0fea3c3af0975 128476 chromium-sandbox_149.0.7827.114-1~deb12u1_arm64.deb 545f875266d82dd375a9e137fd8e3d8da7d5df3d 33130408 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb c2d92207bbb60c412f22133cd4bdb772877dba46 56476552 chromium-shell_149.0.7827.114-1~deb12u1_arm64.deb 203c53357fd107133b4c88af2dc0a0a15ff9e406 30469 chromium_149.0.7827.114-1~deb12u1_arm64-buildd.buildinfo 1fd845f44f03f613a44b0b2d96905686063f9c9b 65743316 chromium_149.0.7827.114-1~deb12u1_arm64.deb Checksums-Sha256: c208e99f903a27baedef2aff91c7128a27cdbd3279f9c938550b0c304c5d01c2 6491484 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb 9d1a6b4f77650002a763f90830718bd21d61f5bb66a9933b8d951b2898bcb82f 30964968 chromium-common_149.0.7827.114-1~deb12u1_arm64.deb 72e44ff6d325b7c83c87d61dae0665891370baef545acec1570c3ea1d4c6fbfe 37845280 chromium-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb e54a2a4a5025da5df5899cbf9de84de8019dacfc3245ae72f4b559de2882b826 6920708 chromium-driver_149.0.7827.114-1~deb12u1_arm64.deb 21185328e529adf69a467eaafac2a796c7c401d4d56ea52f760156f3ada6488a 30672364 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb 439fca06bde3bb64ce171d1962367e843d42206187b0b813869b64b3bf1bb5ba 51548776 chromium-headless-shell_149.0.7827.114-1~deb12u1_arm64.deb e4b985e12944260804ebab7b2a67884e35b0a41635c5eda02de8422053bc5c13 20260 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb d0348f193c62115f0652f830086c608ee9993c0081b92daeca3b29dce4bc2327 128476 chromium-sandbox_149.0.7827.114-1~deb12u1_arm64.deb cdfd33715555b0ee6eead0b0e0f2763d5e024a353fc2de5fca3f710d9a181a73 33130408 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb fec56abb1cc16db2b8566b2560dfce51128f6083b15de202790069b9a095bc97 56476552 chromium-shell_149.0.7827.114-1~deb12u1_arm64.deb 30f7c754978ef4b038af2a639f889d51269472e6b96b72d79d41dfabf3b6ca68 30469 chromium_149.0.7827.114-1~deb12u1_arm64-buildd.buildinfo 3f9e646e3003cbb6a11181251c15b66f372a46d4b44d34286b48a1360aa11ed2 65743316 chromium_149.0.7827.114-1~deb12u1_arm64.deb Files: f13a05ac64bf7f984325f9c9366a0ba8 6491484 debug optional chromium-common-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb aa2210c3fc62059cb7acfb9bbede8a03 30964968 web optional chromium-common_149.0.7827.114-1~deb12u1_arm64.deb 86fc5e1102598e627955a05f8729af46 37845280 debug optional chromium-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb 04a667d18df4926ad0c73c22df46818c 6920708 web optional chromium-driver_149.0.7827.114-1~deb12u1_arm64.deb c8e0adec957a3c87fa609b86c7eef4b5 30672364 debug optional chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb c363fa7b8ac0eca110e20ce84512bde0 51548776 web optional chromium-headless-shell_149.0.7827.114-1~deb12u1_arm64.deb 24ae3619df668b3cba38e1fe6cc70ecc 20260 debug optional chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb a9a3b95f74e674a2aad521ae312ef985 128476 web optional chromium-sandbox_149.0.7827.114-1~deb12u1_arm64.deb 1a2f25a73dc9033f0fd3293e4acf6188 33130408 debug optional chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_arm64.deb 9b43219eb20ed689008890cd6b7bc297 56476552 web optional chromium-shell_149.0.7827.114-1~deb12u1_arm64.deb 00bb4cbe98a6dd0ef4784eb818442e72 30469 web optional chromium_149.0.7827.114-1~deb12u1_arm64-buildd.buildinfo 269d52c61ce5f21848435bd2fdcde4cd 65743316 web optional chromium_149.0.7827.114-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmotitwACgkQxqCFmsOW gobUJQ/+NrTBP4EJlJvPX6UtOlJSrM+A71SLbt5JGTBST647qz02IiZZuKo3h30t uHtX/ZYFYJQXPT1KFRrhwqjFNKLgi5tHmr4UHKhfyt462qr24jovmBPsXyALDLa5 eiIH4uhwSUOMowxzQm4XVi9UmTkew90ZQKkWK5AdUC2aCQ+nMBIkslQhAJF50pMk gio85ZlBFvD4LcO21qjOzh66PWyocmOFlSMLdUWQCxVI3U3SpIEYQ0jIw+pGc/x/ vzLiSx0u1grz0DmiJo6xu+d0hW7dSD3wmklCTlt2JgzXLIYxv1XG+Y+QiB6lBqYN xwb1B78N2qKlQ0MgRdzgzNYXkJwff2A7EiQy10R4xI2Rhwx4xCsiN+iSduejTWFy DQHTLyDIPGqhxlZ/HL33ihshMMY2w+xkopsmmPdNXevN7uqlVDPvHAAbtZ7UD0k6 kDGBOBYkxdJmkbWFvFbizuI+k7GC106D6KU/GFEjyFa0QRBP7k32QOTp0nNSodvN LSNyNdG8sSo9cYnmNH6xrPSu32USw9s6uNg+gE8WvE6jsUUFOyDaAiNQUlA+1rZN 3mcY9PZHz5/PvBdxs+LPuTQlPXvHqOh7Uh4mR/WrQsLjayXHAthjjSAoYhERxXgR RJctbFXdFQ52tRjmAaD7qQRSqakS6sCphqhJf3Fuax/SMfXIXoE= =NxB2 -----END PGP SIGNATURE-----