-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 23 Apr 2026 20:10:12 -0400 Source: chromium Architecture: source Version: 147.0.7727.116-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Closes: 1134412 Changes: chromium (147.0.7727.116-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-6919: Use after free in DevTools. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-6920: Out of bounds read in GPU. Reported by tatiwari of Microsoft. - CVE-2026-6921: Race in GPU. Reported by soiax. . [ Jochen Sprickerhof ] * Make chromium.png icon reproducible (closes: #1134412). Checksums-Sha1: 027002d3b75f4b03affcffb5e0f73877e71f4086 4068 chromium_147.0.7727.116-1~deb12u1.dsc 05f90e2adbe94d49c024a19087189a1b26fc2e97 787243264 chromium_147.0.7727.116.orig.tar.xz 22bee9d936087b37efe18a544dfe816b417a8886 8567720 chromium_147.0.7727.116-1~deb12u1.debian.tar.xz 388fc7090a7d4791247faea66654bb2d17e159ff 26842 chromium_147.0.7727.116-1~deb12u1_source.buildinfo Checksums-Sha256: d264068aca30daf64b70e5a50da1bf6fd1af5716bb1e761f1ca68989db9c8c13 4068 chromium_147.0.7727.116-1~deb12u1.dsc b808992f5a680372b8276466645183315326d8d0e66f080266883a07f36551c8 787243264 chromium_147.0.7727.116.orig.tar.xz 0c4d731500d6dab6ce82a4c3bda57d880a041f0b5a302bf0d1ae5a0b8421046d 8567720 chromium_147.0.7727.116-1~deb12u1.debian.tar.xz 3a9e9d9e7973aa8710554ebac12ba8ad4ae2cc3470133472fc9366fa769c933a 26842 chromium_147.0.7727.116-1~deb12u1_source.buildinfo Files: 823d967c0bc817b7b38bf61ac4a5603b 4068 web optional chromium_147.0.7727.116-1~deb12u1.dsc 083a2901f851b88d01de65dc337edec6 787243264 web optional chromium_147.0.7727.116.orig.tar.xz 49eac69bdf9610c0c74441bf7c1cb58e 8567720 web optional chromium_147.0.7727.116-1~deb12u1.debian.tar.xz e45a99b29935c98ad3bcc03700b29b53 26842 web optional chromium_147.0.7727.116-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmnq6GoUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjd7Ag//fywBRM+HovwiULd4iZ40DLLLbU8v EuiwyPLZ/NoTVOHuAvKyEAZjr4Lfy/rLODis16LKrBFjE+lQ6TnM6yI4WSeG2xE5 gKp8sFoJX+EdpE0ZHEc9mhr4ZMFSREtpLrS2WEths21W/10oldmqTjdr6pnSEwA6 bhsr/zB01aW2V3DxGMtnmUkjIP/RByUS8p9Qgrm8fQut7LWCktAitHciPmOr8lbF Krma7Ur+aQlOtVYYTeQPdaC8CInw7KNzznC70yyFI8lCi2AQq/fJxx5YBdZNNabo gADaivF4CeOdxu9A6rV/t4ODLAlwzav88QZStjyZo+jFGJcPiKZ69tS3Z+3JMOwG +N39n0Z8jtGGSlZBwYncJqS4nG3wtK7EuJlFzASx2lP4vih1jMgK7MzZnfNMHJcz zwi05k58tFUeQmvxjfGeYlxA/knet03jIUFjyQXCZGi4CGx1GTetIWT9Q4Wf1rEN piJymnn9AKuYUSQeCultElhWMdG9NmdvkWXU2AEIPk8LECGtjVWlNtUVJnHz9pp8 bk1EdIy5oAFfYuPLmRIgNWG0ZDx5uvWXdj3ybCqZBVW1J3xLueZcexOe9aRGku35 KQV+iTmn3Ptv9+b4fisH6j8TknIMgum/onJoNsmavAkI/UYwNDYqDIZlt7pXX9US AuWaX7DBa+B6ngY= =Lwsi -----END PGP SIGNATURE-----