-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 01:14:44 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 149.0.7827.155-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.155-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12437: Use after free in WebShare. Reported by Google. - CVE-2026-12438: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12439: Use after free in Digital Credentials. Reported by Google. - CVE-2026-12440: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12441: Use after free in File Input. Reported by Google. - CVE-2026-12442: Use after free in Passwords. Reported by Google. - CVE-2026-12443: Use after free in Web Authentication. Reported by Google - CVE-2026-12444: Out of bounds read in Chromoting. Reported by Google. - CVE-2026-12445: Use after free in Extensions. Reported by Google. - CVE-2026-12446: Insufficient data validation in Passwords. Reported by Google. - CVE-2026-12447: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12448: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12449: Use after free in Chromoting. Reported by Google. - CVE-2026-12450: Inappropriate implementation in Media. Reported by Zhixin Tu. - CVE-2026-12451: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12452: Use after free in Downloads. Reported by Google. - CVE-2026-12453: Insufficient validation of untrusted input in Input. Reported by Google. - CVE-2026-12454: Race in Safe Browsing. Reported by Google. - CVE-2026-12455: Use after free in Tab Strip. Reported by Google. - CVE-2026-12456: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-12457: Insufficient data validation in Extensions. Reported by Google. - CVE-2026-12458: Incorrect security UI in Passwords. Reported by Google. - CVE-2026-12459: Inappropriate implementation in Serial. Reported by Google. - CVE-2026-12460: Insufficient policy enforcement in File System Access. Reported by Google. - CVE-2026-12461: Out of bounds read in WebRTC. Reported by Google. - CVE-2026-12462: Use after free in Media. Reported by Google. - CVE-2026-12463: Inappropriate implementation in Views. Reported by Google. - CVE-2026-12464: Use after free in Browser. Reported by Google. - CVE-2026-12465: Insufficient validation of untrusted input in Metrics. Reported by Google. - CVE-2026-12466: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12467: Use after free in Extensions. Reported by Google. - CVE-2026-12468: Inappropriate implementation in Updater. Reported by Google. - CVE-2026-12469: Uninitialized Use in GPU. Reported by Google. Checksums-Sha1: ec08791edd9f6a768474fa1d06a17428777a5880 6138248 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 4ac311282b78b5bc1471519fd9e3b01a9e83448e 30802616 chromium-common_149.0.7827.155-1~deb13u1_arm64.deb a9511e4e445a02384ef5fdb638504eb03d632bed 34833076 chromium-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 014574b9a232d7aed5f85391740051493d92621a 6809600 chromium-driver_149.0.7827.155-1~deb13u1_arm64.deb 91b311f9cbdd8209664f13365789a0e1468ef5a3 29045776 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 9ec7e80e049decc66fa8265f52fa20e3e5ba61f9 55470596 chromium-headless-shell_149.0.7827.155-1~deb13u1_arm64.deb 660500f45c25342bb24c2556b160f19744add6db 21084 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb aade6ce466b491cfe3b788dfedfc56669c1bd121 126796 chromium-sandbox_149.0.7827.155-1~deb13u1_arm64.deb e355b333f4824e599d2c44a6add91f284a6cf57f 30516988 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 9002112edafa20d9050323a97ca05d0c58a87a53 55268812 chromium-shell_149.0.7827.155-1~deb13u1_arm64.deb 00c2d7e3e9361b70820dfd88cd38fec4db494686 30646 chromium_149.0.7827.155-1~deb13u1_arm64-buildd.buildinfo 78426ff36bcd885f48f9e8608a5e2e0c6a5a1d1a 73995816 chromium_149.0.7827.155-1~deb13u1_arm64.deb Checksums-Sha256: 8133b4cfc342607ea8c73be1aa4bda1b52bdc2a301dcf5b97c83a4d3a548d0a8 6138248 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb e2ac966a52f97af6063836f2c5e4d6fce336cc688e324156af9d9d2695e47e76 30802616 chromium-common_149.0.7827.155-1~deb13u1_arm64.deb 48c26158b53ef4f645932d281fcb7b556d4aef276545999eb5c617e5e95f9618 34833076 chromium-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 9597d1245ded93c2bb65948a6cd64bdf39d19a11e1ccd062b09b23c015313a42 6809600 chromium-driver_149.0.7827.155-1~deb13u1_arm64.deb 94702a74568dac3c5a4cffff3bfcf9e3dd675b6b862798eef85261ec4f906de6 29045776 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 9d8b3ce049ef1e57bf1bfb86c29243ee84379c045b1192a779b327a810e467e2 55470596 chromium-headless-shell_149.0.7827.155-1~deb13u1_arm64.deb 7dfa19c3c815290eaa3e95761fb60d84d0f7dfb761c0acbda8e6b000c5722396 21084 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb d3aadde13b49128f03fc4437eebac0d1bbbc322c3d808734a89224733ea102ce 126796 chromium-sandbox_149.0.7827.155-1~deb13u1_arm64.deb 59f63f491ad781da4c3d8c7bc584209a5d799b4811b23e45e385417429d1fe68 30516988 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 039f139b683d9770b5a6b98eb34a1f7dcf167dad303ec8cac844bb2f2b341cc9 55268812 chromium-shell_149.0.7827.155-1~deb13u1_arm64.deb 8122b5e8736536f8135e81a7b2a7a3d23727bcd367b90743585dd19c21bcc505 30646 chromium_149.0.7827.155-1~deb13u1_arm64-buildd.buildinfo d64219368416f7f3a9d7abb2a3c4e07e45eedb2f843ec217e3f41ecfb6bd0100 73995816 chromium_149.0.7827.155-1~deb13u1_arm64.deb Files: 1bc57700e7a9d3b033a5e3cc135e7c9d 6138248 debug optional chromium-common-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 3688f86b1cdf202337f572c1bc153e47 30802616 web optional chromium-common_149.0.7827.155-1~deb13u1_arm64.deb 6bd6bb9bf4b8717e8f6e5a518d46c063 34833076 debug optional chromium-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb ef7b46b8ce7c45f014b9574c9943424e 6809600 web optional chromium-driver_149.0.7827.155-1~deb13u1_arm64.deb 6ffa67f6963d976b2825876971ff4f8f 29045776 debug optional chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 5b7237c7e23c364262445a1d2a496c9e 55470596 web optional chromium-headless-shell_149.0.7827.155-1~deb13u1_arm64.deb 22c9211d97d63a9cac6f3eeeb12376ad 21084 debug optional chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 0b54147a68c09e0a4b0c32eb87979f0b 126796 web optional chromium-sandbox_149.0.7827.155-1~deb13u1_arm64.deb 1825ca4a28206a3da28a49f9e278c329 30516988 debug optional chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_arm64.deb 42cf7330dc08ee59c8093f4eea9805c3 55268812 web optional chromium-shell_149.0.7827.155-1~deb13u1_arm64.deb ed8e336f697d2335d3703056cd99d84b 30646 web optional chromium_149.0.7827.155-1~deb13u1_arm64-buildd.buildinfo 83e69f209c60b67a714be890fbac83e2 73995816 web optional chromium_149.0.7827.155-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmo0RO0ACgkQScpU3dYu lLhnmQ//YLeZqZNk4HBFzRjF2NIdkTwre/MpWSn8qaA1OqAYOQXLBubHWHuAcuih NbuPhL11Tm6MvmWFG8SCr3ALymnxcw/d1/GK4menl9BH2lzlaAu7e45K4wTLqf81 4d8rHFeB457l3lKGTq/AQKPOnpj17ZXBKsmI7SPJJypJLiDdtyIhUQGnE/AWhTCC QX8PaofURrLEZjhL34FQRu7lM7F/XCFDpKGB0p6YsCGvUyzOGYo/8sIyygM/o+jr qjTSGtcX6caPx8aV4srK3cEcZ5xmdWIkjLU6T/2bam9d3NqDxuTxSBJiXbTBiWN7 MNLzxe0ehtu+dEVmMqeJXA22ae+pqL1KeSj8lZ/dWb0qZbGzwq2MwZ/zuZSREO0m ZSW8ZOV8BtFr3aHWWFG2IENVjKecr5ohSF4uD3KGEIsIhzWDzEUv+Rgo330aipZy EBPplJhNMLbg/qtLPD+xzLgT8Ak9NH8UBmKd8WzkxAwVOE11wVoFpuBqVzLb+CBx +cgcufxaDd9cCJrVwMtDyAmFI/W1WqgOzFXFcSwJLIkJcSIujJkR3X1tUxu9cijd 73S9+1Q7p2Y1gNJOIsqS+iOT2SqMHr5vy4jT2VX1jOLKVIsHPK6nB2SidN0f8y4l it04IKXdCwp0ZYHJaTYQWAvKB5huU+zoWdvwTL2AcKp8iDqneIY= =6l8D -----END PGP SIGNATURE-----