-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 01:14:44 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 149.0.7827.155-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.155-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12437: Use after free in WebShare. Reported by Google. - CVE-2026-12438: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12439: Use after free in Digital Credentials. Reported by Google. - CVE-2026-12440: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12441: Use after free in File Input. Reported by Google. - CVE-2026-12442: Use after free in Passwords. Reported by Google. - CVE-2026-12443: Use after free in Web Authentication. Reported by Google - CVE-2026-12444: Out of bounds read in Chromoting. Reported by Google. - CVE-2026-12445: Use after free in Extensions. Reported by Google. - CVE-2026-12446: Insufficient data validation in Passwords. Reported by Google. - CVE-2026-12447: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12448: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12449: Use after free in Chromoting. Reported by Google. - CVE-2026-12450: Inappropriate implementation in Media. Reported by Zhixin Tu. - CVE-2026-12451: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12452: Use after free in Downloads. Reported by Google. - CVE-2026-12453: Insufficient validation of untrusted input in Input. Reported by Google. - CVE-2026-12454: Race in Safe Browsing. Reported by Google. - CVE-2026-12455: Use after free in Tab Strip. Reported by Google. - CVE-2026-12456: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-12457: Insufficient data validation in Extensions. Reported by Google. - CVE-2026-12458: Incorrect security UI in Passwords. Reported by Google. - CVE-2026-12459: Inappropriate implementation in Serial. Reported by Google. - CVE-2026-12460: Insufficient policy enforcement in File System Access. Reported by Google. - CVE-2026-12461: Out of bounds read in WebRTC. Reported by Google. - CVE-2026-12462: Use after free in Media. Reported by Google. - CVE-2026-12463: Inappropriate implementation in Views. Reported by Google. - CVE-2026-12464: Use after free in Browser. Reported by Google. - CVE-2026-12465: Insufficient validation of untrusted input in Metrics. Reported by Google. - CVE-2026-12466: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12467: Use after free in Extensions. Reported by Google. - CVE-2026-12468: Inappropriate implementation in Updater. Reported by Google. - CVE-2026-12469: Uninitialized Use in GPU. Reported by Google. Checksums-Sha1: 7e799783bb830d1b04c80b147472aff16692c5f8 5199272 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 6f0213601f92b49fac5db799c98f5d25f3a1bf07 26277356 chromium-common_149.0.7827.155-1~deb13u1_amd64.deb c85314466e03ddcc6b24fb8a385b2347f2a31e65 33330952 chromium-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb b1194d567e7efdf89782607e037f41347aed9e3d 7673664 chromium-driver_149.0.7827.155-1~deb13u1_amd64.deb 0d8a342d2e8e77c5d571885820fba3821eba6cfb 28197064 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb a0999e82b5bd27d293c93f3bc95d411d73b5add0 63468896 chromium-headless-shell_149.0.7827.155-1~deb13u1_amd64.deb d98f24d7d1b48c7736a0a49d52049a1db2c2cf9f 20216 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 969cc81e4fac66a4e2a8c6c7808b280a6a12a79a 126000 chromium-sandbox_149.0.7827.155-1~deb13u1_amd64.deb 12d3bce0fc4cf88305ea92b96365a5a875f0826c 29813564 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb b68ed84ecac9a42ab96285139e4d059daf37d651 63083160 chromium-shell_149.0.7827.155-1~deb13u1_amd64.deb 5cfd87b524e9b28b3c10f121c0cf2186a779a2d5 30680 chromium_149.0.7827.155-1~deb13u1_amd64-buildd.buildinfo 24a7c129aceb233745cc34c2d0546a9ae4b7b7f1 85830792 chromium_149.0.7827.155-1~deb13u1_amd64.deb Checksums-Sha256: c3023bf7a2503ff9426e46e80e2d67bc68b9b9a34d1964dbc63024fb0349115f 5199272 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 6a37ac09dc12003e67134ffb3408019678089e151623b5a16b67cfa200f2efeb 26277356 chromium-common_149.0.7827.155-1~deb13u1_amd64.deb 38b24742f5c14c5fff92b527b7481d07720802069c1d2e1fb615a7cc8b48d380 33330952 chromium-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb a625a765cab6587af1d18c11a70b2592bf7918e54b88138defd5a22e430ae826 7673664 chromium-driver_149.0.7827.155-1~deb13u1_amd64.deb d1970366fc75c81fced5dccb47cb52b8b82eb4c28a4ed674bc498c50536cc05d 28197064 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 4af8895204fa28ed640daac53d9fed1bd6de992f7a7045b820a97bb20eebec4e 63468896 chromium-headless-shell_149.0.7827.155-1~deb13u1_amd64.deb df6cafca9c6f4d3870f356b7e8425829c9ae2cc69bea77a825134ebe36e88147 20216 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 357075242ccba2d75e1c100f9471268566e6bd9b5222e1e156faa6e798077ce0 126000 chromium-sandbox_149.0.7827.155-1~deb13u1_amd64.deb 01f6d6bd49a2ab92153a4b68baab141d1a2a391a59f736bd2a0d6fbd302735ca 29813564 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb ba2402280104a1074aa6caeed52ecd6a0beb023bdc8646917e0b650d750908a6 63083160 chromium-shell_149.0.7827.155-1~deb13u1_amd64.deb 65468d93034078a03874d5ac3b10fa9fb2c14ec301f7d38f113046e3bbb56b58 30680 chromium_149.0.7827.155-1~deb13u1_amd64-buildd.buildinfo bb19e6a6f39c7fab7c3a25c11f509889b1e8204ae25a89e314d004a18b3aa927 85830792 chromium_149.0.7827.155-1~deb13u1_amd64.deb Files: f4aa3016a7f1c9124ecd75cd39061a55 5199272 debug optional chromium-common-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 9fd7dc9bd2f43697d809cd99c28cf991 26277356 web optional chromium-common_149.0.7827.155-1~deb13u1_amd64.deb 304848367d5b70d2a746ad81d39f79d7 33330952 debug optional chromium-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 7e2a274d9665efce92ca9130338df3c2 7673664 web optional chromium-driver_149.0.7827.155-1~deb13u1_amd64.deb 9e5a0e53837137b7b2b725a35a2a2540 28197064 debug optional chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb a4cc17a3cef5a503ea8d4fe394aca5f0 63468896 web optional chromium-headless-shell_149.0.7827.155-1~deb13u1_amd64.deb a83229c86ed65e26d85727fbbcc2d553 20216 debug optional chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 7d80656504cb77e18a38609dde07d32b 126000 web optional chromium-sandbox_149.0.7827.155-1~deb13u1_amd64.deb ec8c5b2cb44598e09a8bc6d013cfedd4 29813564 debug optional chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_amd64.deb 43913f12350708e458c651d818352767 63083160 web optional chromium-shell_149.0.7827.155-1~deb13u1_amd64.deb 9b2b01416b48d2e9928c8b6929a48856 30680 web optional chromium_149.0.7827.155-1~deb13u1_amd64-buildd.buildinfo 16ba6f5154d528b26a8e2253db6f3578 85830792 web optional chromium_149.0.7827.155-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmo0PQUACgkQf2INRiCd aWJr/RAAiGTaSQrdm0QI8wOuRG9FX0bsocH5QtLNHrGUL3s3VeipdeJSBjpnUkqG zmgLjlR6emNU0AjlsRaqFTYIKHUWoYpuxpx+HC+Kt+Ka3ANkD0vREsOYBT/HQNXN 7gDn6Go7iXmEPkxAZGZN45CsUhcfanhZPBE2AZ/hITVXUBcfuSPYPYf+vnyDxHNV DyMD2hR5l+Bn7eFGKi/aaVaIJ7ofG1ar7WGJhjOWh/MBuvT9t5wRNTF5n5KB+8sg wUJZ7nvqkutt+FYihtihL1x5LYgusyQ6hWu4eHZ15qGfsUwh1aUKC3KDPHfOA1XV 6Gijs5/oXbCLyLm2mbLaxUFXM6ShMXMsbj9kE3uK2Wgv6fp4aI8mMPBfW+85X2ma 2Y2sI4e7fmuB5+iW1gdnhsLRirzMjdG+8/cvrdJ/+aVtVrR5RliGGVjQhFXBcMwY 0IDu27amFZoqnIEFL0FD/KQvUpP/hzpE1LrVBvo53PQQXTwiA9YHurLm/f9Cper2 UhHCRgprSGT957+3GH2oJDNOQ1kKq4Ri9XC/bOH4f0FT8Bwv3Pu7nE/LcLJLpNc7 LPa5IaqwRKE5SgZS2xbuQtE1vNw6K3MO1nq6PB82/JtIbXd6o1iWEi/ZwuZsXN3k nGm9BlZmlUS7glDM1JVZFhW3PyBtV0tucqAKGEUtMSjXvr+Vvrw= =UPxe -----END PGP SIGNATURE-----